Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthenticated attackers to access through the HTTP network, potentially taking control of Oracle Outside In Technology during user...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Data Sets component. It may allow attackers with limited privileges to create, delete, or modify critical or accessible data via HTTP...

Oracle iSupport security vulnerabilities

A security vulnerability exists in Oracle iSupport versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Service Requests component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

TOTOLINK X2000R encryption vulnerability

The TOTOLINK X2000R has an encryption vulnerability. This vulnerability arises from the boa firmware update feature, which does not verify the firmware signature. Attackers can upload specially crafted firmware binary files through authenticated HTTP requests, resulting in arbitrary firmware...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data and all accessible data via the HTTP network...

Oracle PeopleSoft Enterprise SCM Manufacturing security vulnerabilities

Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions o...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to create, delete, or modify critical data or any other accessible data via HTTP access...

Oracle WebLogic Server authorization issue vulnerability

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component issues and may allow unauthenticated attackers to access through the HTTP network. As a result, unauthorized individuals may...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data through HTTP network requests, as well as access all accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Multichannel Framework component, which may allow high-privilege attackers to take control of PeopleSoft Enterprise PeopleTools through HTTP network access...

Oracle Siebel Apps - Financial Services security vulnerabilities

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain access via HTTP, thereby taking control of JD Edwards...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle Applications...

Oracle Communications Billing and Revenue Management Authorization Issues Vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This issue stems from problems with the BRM Server component. It may allow unauthorized attackers to access the network via HTTP, thereby enabling them to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. Attackers with low privileges can access the system via the HTTP network, unauthorizedly create, delete, or modify critical...

Oracle PeopleSoft Enterprise PeopleTools information leakage vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critical data o...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access through the HTTP network, allowing them to re...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, gain unauthorized access to key data, or access all dat...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, enabling unauthorized access to key data or full access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow attackers with high privileges to gain network access via HTTP, thereby taking control of Oracle Agile Product...