Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network requests...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Case management Service 11g+ component. They may allow unauthorized attackers to access critical data or all accessible data via HTTP network...

Letta authorization issue vulnerability

Letta versions 0.16.8 and earlier have an authorization issue vulnerability. This vulnerability arises because API callers can bypass authentication by providing a self-proclaimed userid in the HTTP header, thereby impersonating other users. This could lead to the reading and modification of prox...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing low-privilege attackers to access critical data or all accessible data through the HTTP network without proper...

Oracle US Federal Human Resources security vulnerability

A security vulnerability exists in Oracle US Federal Human Resources versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain HTTP access, thereby accessing critical data without...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers to access data through the HTTP network, requiring user...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, under user interaction without proper...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access data via the HTTP network, enabling unauthorized access to certain accessible data...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network. This enables unauthorized access to certain data when user interaction ...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues with the Java Business Objects component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data or any other...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the deviceName function of the boa formParentControl component. A specially crafted HTTP request can lead to arbitrary code execution,...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with limited privileges to gain access via HTTP, thereby taking control of Oracle Mobile Field Service...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from a problem in the Kernel component and may allow unauthenticated attackers to gain HTTP access, potentially causing service hangs or frequent crashes...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the UIF Open UI component. As a result, unauthorized attackers may gain access through the HTTP network, leading to unauthorized...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network requests without proper...

Oracle Service Bus security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Service Bus contain a security vulnerability stemming from issues in the Core component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Service Bus...

Oracle Siebel Apps – Customer Order Management security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Order Management component. Attackers with low privileges may access through the HTTP network, utilize user interactions, and unauthorizedly update, insert, or delete certain...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow attackers with low privileges to gain control of the Oracle Essbase through HTTP network access, potentially affecting other products as well...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, o...