Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Attackers with low privileges and access to the network via HTTP may be able to unauthorizedly create, delete, or modify critical data or all...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow unauthenticated attackers to access via HTTP, interact with users, and unauthorizedly update, insert,...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without authorization...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Object and Env Tech SEC components. They may allow unauthorized attackers to access critical data through HTTP network connections, or to gain full...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access. They may then make unauthorized updates, insert, or dele...

Oracle WebCenter Portal security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Portal contain a security vulnerability stemming from issues in the Runtime Tools component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby creating, deleting, or modifying critical or all accessible data...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow low-privilege attackers to gain control of Oracle Engineering via HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Capacity security vulnerability

A security vulnerability exists in Oracle Capacity versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Capacity via HTTP network access...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access data via the HTTP network, enabling unauthorized updates, insertions, ...

Security vulnerabilities in Oracle WebLogic Server Proxy Plugin

Versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 of the Oracle WebLogic Server Proxy Plugin contain a security vulnerability. This vulnerability stems from issues within the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. It may allow unauthenticated attackers to gain HTTP...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component, potentially allowing unauthenticated attackers to gain access via HTTP networks and thereby access critical data or all accessible da...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, resulting i...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...

Apache Tomcat race condition vulnerability

There are concurrency issues with Apache Tomcat versions 11.0.22 to 11.0.26, 10.1.55 to 10.1.60, and 9.0.118 to 9.0.122. These issues stem from improper object recycling and reuse during HTTP/2 asynchronous Servlet processing, which may lead to confusion between requests and/or responses between...