Oracle WebLogic Server authorization issue vulnerability

Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of Oracle WebLogic Server contain an authorization issue vulnerability. This vulnerability stems from a Core component problem and may allow unauthenticated attackers to gain HTTP network access and take control of the Oracle WebLogic...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data through the HTTP network via user interaction. This can result in unauthorized updates,...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 version has a security vulnerability. This vulnerability stems from issues with the BI Search component, which may allow unauthenticated attackers to access through the HTTP network, potentially causing certain types of...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access through the HTTP network. Without user interaction, unauthorized users may...

Oracle HCM Common Architecture security vulnerabilities

Oracle HCM Common Architecture versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data via the HTTP network, unauthorizedly create, delete, or modify critical or...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthenticated attackers to access through the HTTP network. This could lead to unauthorized access to critical data or all data, as well as...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow unauthenticated attackers to gain HTTP access, resulting in service hangs or frequent crashes, as well as unauthorized reading of certain accessible data...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues within the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTT...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle General Ledger security vulnerabilities

Oracle General Ledger versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges may access critical data or all data through the HTTP network, causing some denial-of-service attacks...

Oracle MySQL Cluster permission licensing and access control issues

Oracle MySQL Cluster 9.7.3 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Cluster: NDB Operator component. They may allow low-privilege attackers to gain network access via HTTP, resulting in service downtime or frequent...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthorized attackers may gain access through HTTP network connections, allowing...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. Attackers with low privileges can exploit this vulnerability through network access via HTTP. However, they require user...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Bills of Material through HTTP network access...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Attackers with low privileges may exploit these vulnerabilities to gain control of Oracle SOA Suite through HTTP network access. This could...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical data ...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...