Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In PDF Export SDK component. It may allow unauthorized attackers to gain access through the HTTP network, thereby taking control of Oracle Outside In Technology when user...

Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. This may allow attackers with low privileges to access through the HTTP network and unauthorizedly create, delete, or modify...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access critical data or all accessible data via the HTTP network...

Oracle Pasta security vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Pasta through HTTP network access...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible dat...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Publisher Security component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.2.2 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow low-privilege attackers to access critical data through the HTTP network, without proper authorization, or to access all accessible da...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, update, insert, or delete certain...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access critical data and all accessible data through the HTTP...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow low-privilege attackers to gain network access via HTTP, thereby taking control of the Oracle Essbase...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from an stack buffer overflow in the MCLI function. This vulnerability could allow attackers to execute arbitrary code through specially crafted HTTP requests...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Panel Processor component. Exploitation is relatively difficult; low-privilege attackers can access data via the HTTP network, requiring interaction with...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with high privileges to access via the HTTP network, unauthorizedly create, delete, or modify critical da...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data via the HTTP network. These attackers are not authorized to create,...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component. It may allow unauthenticated attackers to take control of Workflow through HTTP network access, and it may also affect other products...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow unauthenticated attackers to gain access via HTTP over the network, requiring user interaction. It could result...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...