Oracle PeopleSoft Enterprise PeopleTools information disclosure vulnerability

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain an information disclosure vulnerability. This vulnerability stems from issues within the nVision component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data without authorizatio...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access through the HTTP network. This could lead to service hangs or frequent crashes when user interactio...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component and may allow low-privilege attackers to access certain accessible data via HTTP without authorization...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle Sales Foundation security vulnerabilities

The Oracle Sales Foundation versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Security API component, which may allow low-privilege attackers to access through the HTTP network and take control of the Oracle Sales Foundation...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Web Listener component. They may allow attackers with low privileges to log into the Oracle HTTP Server and gain control over the underlying infrastructure, thereby completely takin...

Oracle Service Bus permission and access control vulnerabilities

The Oracle Service Bus 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Core components, and they could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of the...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Create Item Instance component. Vulnerable attackers may access critical data or all data through HTTP network interactions without proper authorization. They may also...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Change Assistant component. They may allow attackers with high privileges to access critical data or all accessible data via HTTP, leading to...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow low-privilege attackers to gain network access via HTTP, leading to service hangs or frequent crashes complete denial of service, and potentially unauthorized readi...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access critical data or all data through HTTP network interactions, under user interaction...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers with low privileges may access critical data or all accessible data through the HTTP network...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Federated Partitions component. They may allow attackers with low privileges to access critical data through the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Item Catalog component. Vulnerable attackers may access critical data or all data through the HTTP network. They may also access unauthorized parts of data, perform updates...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, enabling unauthorized updates,...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to access critical data via the HTTP network, gain unauthorized access to key information, or fully access all accessib...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data or all data through HTTP network access. These attacker...

Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...