Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-http1 component. Unauthorized attackers may exploit these vulnerabilities to gain access via the HTTP network, resulting in certain types of...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow attackers with low privileges to gain access to Oracle Identity Manager via HTTP network access...

Oracle Service Bus security vulnerabilities

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network, causing the service to become suspended or crash frequently...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Report Distribution component. It may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical or...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers may gain access through HTTP network connections, leading to unauthorized access to critical data or all...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of Oracle Payroll...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. Unauthorized attackers may gain access via the HTTP network. Without interaction with authorized personnel, they may create, delete...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues with the Java Based Agent component. This vulnerability may allow unauthenticated attackers to gain HTTP access and unauthorizedly read certain accessible data within Oracle Essbase...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. Unauthorized attackers may gain access through the HTTP network. They may access critical data, or all data, as well as update,...

Oracle Siebel CRM End User security vulnerability

A security vulnerability exists in Oracle Siebel CRM End User versions 17.0 through 26.9. This vulnerability stems from issues within the Communications Panel/Dashboard component, potentially allowing unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. They may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorized updates, insertions, or deletions of...

Oracle Assets security vulnerability

A security vulnerability exists in Oracle Assets versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access. It can result in service hangs or frequent crashes, as well as unauthorized...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities are caused by issues with the SAP ERP+ component. They may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, o...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with Open UI components, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorization...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. This enables them to update, insert, or dele...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle JDeveloper security vulnerabilities

Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. Unauthorized attackers may gain access through HTTP network interactions, allowing them to access critical data or all accessible dat...

Oracle Siebel CRM End User Authorization Vulnerability

Oracle Siebel CRM End User versions 17.0 to 26.9 have authorization issues. This vulnerability stems from Open UI components, allowing unauthorized attackers to access through the HTTP network and perform unauthorized updates, insertions, or deletions on certain accessible data...

Oracle Primavera P6 Enterprise Project Portfolio Management security vulnerabilities

Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0.0 to 21.12.21.9, 22.12.0.0 to 22.12.21.4, 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8 have security vulnerabilities. These vulnerabilities stem from issues with the Web Access component, which may...