Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, potentially allowing unauthorized attackers to access through the HTTP network. This may lead to unauthorized updates,...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access and unauthorized access to critical data or all accessible data...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow high-privilege attackers to access through the HTTP network, enabling them to unauthorizedly create, delete, or modify critical data o...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data of the Oracle Essbase without proper authorization...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow attackers with limited privileges to exploit HTTP access to compromise and take control of the Siebel CRM...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, potentially leading to service suspension or frequent crashes...

Cloudflare Pingora resource management error vulnerability

Cloudflare Pingora versions prior to 0.8.1 have a resource management vulnerability. This vulnerability arises from HTTP/2 servers not explicitly limiting the size of the decoded header list and the number of concurrent streams. Remote unauthenticated attackers can exploit this vulnerability by...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues. Unauthorized attackers may gain access through the HTTP network. Key data or all accessible data may be accessed without user interaction. Additionally...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. Unauthorized attackers can exploit these vulnerabilities through HTTP network access. This may lead to unauthorized creation,...

Oracle Agile Product Lifecycle Management For Process authorization issue vulnerability

Oracle Agile Product Lifecycle Management for Process version 6.2.4 contains an authorization issue vulnerability. This vulnerability stems from issues within the Product Quality Management component and may allow unauthenticated attackers to create, delete, or modify critical data or all...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These stem from issues in the helidon-webclient-http2 component and may allow unauthenticated attackers to access the service via HTTP/2 networks, potentially leading to service hangs or frequent crashes...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Query component and may allow attackers with limited privileges to access certain accessible data via HTTP without authorization...

Oracle Helidon security vulnerabilities

A security vulnerability exists in Oracle Helidon versions 3.0.0 through 3.2.21. This vulnerability stems from issues within the helidon-cors component and may allow unauthenticated attackers to access HTTP-based networks. It could enable unauthorized updates, insertions, or deletions of certain...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues within the helidon-security-providers-jwt component, potentially allowing unauthenticated attackers to access certain data accessible via HTTP without authorization...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 3.0.0 through 3.2.21, 4.0.0 through 4.5.5, and 27.0.0. These vulnerabilities stem from issues within the helidon-health component, potentially allowing unauthenticated attackers to access HTTP-based networks and read certain accessible dat...