Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...

Oracle Product Workbench Authorization Issues Vulnerability

Oracle Product Workbench versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the WebUI components, allowing unauthorized attackers to access through the HTTP network. This enables unauthorized creation, deletion, or modification of...

Oracle Shipping Execution security vulnerability

A security vulnerability exists in Oracle Shipping Execution versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Workflow Events component and may allow unauthenticated attackers to gain access via HTTP, thereby gaining unauthorized access to critical data or full...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.2.1 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow low-privilege attackers to access through the HTTP network, to perform unauthorized updates, insertions, or deletions of certain...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, potentially leading to service suspension or frequent crashes...

Oracle iProcurement security vulnerabilities

Oracle iProcurement versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the E-Content Manager Catalog component. They could allow high-privilege attackers to take control of iProcurement through HTTP network access...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Oracle Partner Management versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, allowing attackers with low permissions to access critical data or all accessible data via t...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core components. It may allow attackers with low privileges to access through the HTTP network, thereby unauthorizedly creating, deleting, or modifying critical data or al...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to take control of JD Edwards EnterpriseOne Tools through HTTP network...

Oracle Siebel CRM Cloud Applications information leakage vulnerability

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have information leakage vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, potentially allowing them to read certain accessibl...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow low-privilege attackers to access through the HTTP network, perform unauthorized...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Mobil...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.2.21, 4.0.0 to 4.5.5, and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-http-auth component. Unauthorized attackers may gain access through HTTP network requests, potentially leading to unauthorized acces...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability. This vulnerability stems from issues with the Image Packaging System component. It may allow unauthorized attackers to access the network via HTTP, requiring user interaction. As a result, unauthorized access to critical data or all da...

Eclipse ThreadX – NetX Duo input validation vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a vulnerability related to input validation errors. This vulnerability arises because the HTTP server of Web Add-ons scans the entire request packet during the search for header fields, rather than stopping at the end of the header...

Oracle PeopleSoft Enterprise PeopleTools information disclosure vulnerability

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain an information disclosure vulnerability. This vulnerability stems from issues within the Report Distribution component. The unviable flaw enables unauthenticated attackers to access the system via HTTP, potentially...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data through network HTTP requests, enabling unauthorized updates,...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from an issue with the staticdns2 parameter in the boa formIpv6Setup static network configuration function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...