Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Report Distribution component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Fluid Core component. Unauthorized attackers with low privileges may access the system via the HTTP network. This allows them to perform unauthorized...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebSocket component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data without proper authorization...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-google-login component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain data without proper authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from Tuxedo component issues, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle Identity Manager security vulnerabilities

Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the REST Web Services component, which may allow low-privilege attackers to take control of Oracle Identity Manager through HTTP network access...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the batchupg function, which allows for OS command injections. Attackers can trigger this vulnerability through specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary...

Oracle Siebel CRM Integration information leakage vulnerability

The Oracle Siebel CRM Integration version 25.12 to 26.9 has a vulnerability related to information leakage. This vulnerability stems from issues with the Open Integration component, allowing unauthorized attackers to access critical data or all accessible data through HTTP network access without...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Oracle Diagnostics Interfaces component. They may allow low-privilege attackers to access critical data through HTTP network connections, enabling unauthorized...

Cloudflare Pingora security vulnerabilities

Cloudflare Pingora versions prior to 0.9.0 have security vulnerabilities. This vulnerability stems from the HTTP/1 upstream path of pingora-proxy, which does not remove the client’s Connection header, other hop headers, and the Connection header specified during the writing of downstream requests...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access and damage the Oracle HTTP Server via the HTTP network...

Oracle Application Object Library Authorization Vulnerability

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have an authorization issue vulnerability. This vulnerability stems from Core component problems and could allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component. Unauthenticated attackers can access the system via the HTTP network, and require interaction from non-attacker...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data and all accessible data via the HTTP network. Additionally, they may...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue in the Security component. This vulnerability may allow low-privilege attackers with HTTP network access to take control of Oracle...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain access via HTTP, potentially leading to unauthorized access to critical or all...

Vulnerability related to permission and access control issues in Oracle PeopleSoft Enterprise PeopleTools

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Report Distribution component, potentially allowing unauthenticated attackers to gain unauthorized acce...

Oracle BI Publisher security vulnerability

Oracle BI Publisher 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Web Server component, which may allow unauthorized attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions of certain accessible data,...