Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. Unauthorized attackers may gain access through the HTTP network. They may access critical data, or all data, as well as update,...

Oracle Siebel CRM End User security vulnerability

A security vulnerability exists in Oracle Siebel CRM End User versions 17.0 through 26.9. This vulnerability stems from issues within the Communications Panel/Dashboard component, potentially allowing unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. They may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorized updates, insertions, or deletions of...

Oracle Assets security vulnerability

A security vulnerability exists in Oracle Assets versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access. It can result in service hangs or frequent crashes, as well as unauthorized...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with Open UI components, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorization...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. This enables them to update, insert, or dele...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle JDeveloper security vulnerabilities

Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. Unauthorized attackers may gain access through HTTP network interactions, allowing them to access critical data or all accessible dat...

Oracle Siebel CRM End User Authorization Vulnerability

Oracle Siebel CRM End User versions 17.0 to 26.9 have authorization issues. This vulnerability stems from Open UI components, allowing unauthorized attackers to access through the HTTP network and perform unauthorized updates, insertions, or deletions on certain accessible data...

Oracle Primavera P6 Enterprise Project Portfolio Management security vulnerabilities

Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0.0 to 21.12.21.9, 22.12.0.0 to 22.12.21.4, 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8 have security vulnerabilities. These vulnerabilities stem from issues with the Web Access component, which may...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from an issue in the Asset Management component. This vulnerability may allow attackers with elevated privileges and network access via HTTP to create, delete, or modify critical data ...

Oracle Application Object Library security vulnerability

A security vulnerability exists in Oracle Application Object Library versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Flexfields component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of the Oracle Application...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Mobile Applications component. They may allow attackers with low privileges to access through the HTTP network, update, insert, or delete certain accessible data without...

Oracle Payroll security vulnerability

A security vulnerability exists in Oracle Payroll versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges to gain access to Oracle Payroll via HTTP network access...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain data are possible, as well a...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, potentially leading to service suspension or frequent crashes...

Oracle Essbase security vulnerabilities

The Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all data accessible via Oracle Essbase...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access critical data through the HTTP network, leading to unauthorized access to key data or full access to all data...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal operations component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Payroll component and are difficult to exploit. They could allow attackers with high privileges to take control of Oracle Payroll through HTTP network access...