Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, and unauthorized updates, insertions, or deletions of certain accessible data may occ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Integration Broker component, potentially allowing unauthenticated attackers to gain HTTP access. Under user interaction, they may unauthorizedly...

Oracle HCM Common Architecture security vulnerabilities

A security vulnerability exists in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control over Oracle HCM Common Architecture via HTTP network access...

Oracle Trusted Answer Search security vulnerability

Version 26.1 of Oracle Trusted Answer Search contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow attackers with limited privileges to access HTTP-based networks, resulting in unauthorized access to critical data or all...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow low-privilege attackers to access HTTP-based networks. Under certain circumstances, they can make...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may access critical data or all accessible data through HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow attackers with low privileges to access critical data or all data via the HTTP network, potentially...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues in the Core component and may allow low-privilege attackers to access certain accessible data via HTTP, without authorization. It may also affect other products...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unverified attackers to access critical data or all accessible data through HTTP network interactions, under user interaction...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access critical data or all data via the HTTP network. Unauthorized attacke...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow unauthenticated attackers to access the system via HTTP, enabling them to unauthorizedly update, insert, or delete certa...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthenticated attackers to access through the HTTP network, potentially leading to...

Oracle Outside In Technology Resource Management Vulnerability

Oracle Outside In Technology version 8.5.8 has a resource management vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access through the HTTP network, causing the service to hang or frequently crash repeatedly, resultin...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component, which may allow unauthenticated attackers to access through the HTTP network, thereby taking control of MySQL Connectors...

Oracle WebLogic Server Proxy Plug-in security vulnerabilities

The Oracle WebLogic Server Proxy Plug-in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. Unauthorized attackers can exploit these vulnerabilities ...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle Siebel CRM Deployment information leakage vulnerability

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has a vulnerability related to information leakage. This vulnerability stems from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or all accessible data through HTTP network access...

Oracle Compensation Workbench security vulnerability

A security vulnerability exists in Oracle Compensation Workbench versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Total Compensation Statement component and may allow low-privilege attackers to perform unauthorized updates, insertions, or deletions of certain data,...