Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow unauthenticated attackers to access via HTTP, interact with users, and unauthorizedly update, insert,...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without authorization...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access. They may then make unauthorized updates, insert, or dele...

Oracle WebCenter Portal security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Portal contain a security vulnerability stemming from issues in the Runtime Tools component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby creating, deleting, or modifying critical or all accessible data...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow low-privilege attackers to gain control of Oracle Engineering via HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Capacity security vulnerability

A security vulnerability exists in Oracle Capacity versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Capacity via HTTP network access...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access data via the HTTP network, enabling unauthorized updates, insertions, ...

Security vulnerabilities in Oracle WebLogic Server Proxy Plugin

Versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 of the Oracle WebLogic Server Proxy Plugin contain a security vulnerability. This vulnerability stems from issues within the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. It may allow unauthenticated attackers to gain HTTP...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component, potentially allowing unauthenticated attackers to gain access via HTTP networks and thereby access critical data or all accessible da...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, resulting i...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-http1 component. Unauthorized attackers may exploit these vulnerabilities to gain access via the HTTP network, resulting in certain types of...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Report Distribution component. It may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical or...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers may gain access through HTTP network connections, leading to unauthorized access to critical data or all...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of Oracle Payroll...