Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data without proper authorization...

Oracle PeopleSoft Enterprise HCM Human Resources security vulnerabilities

Oracle PeopleSoft Enterprise HCM Human Resources version 9.2 has a security vulnerability. This vulnerability stems from issues with the Administer Workforce component. It may allow attackers with high privileges to access through the HTTP network. Without user interaction, unauthorized actions c...

Oracle General Ledger security vulnerabilities

A security vulnerability exists in Oracle General Ledger versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges and network access via HTTP to create, delete, or modify critical data or all...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to gain control of Oracle Product Hub via HTTP network access...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Sourcing security vulnerability

A security vulnerability exists in Oracle Sourcing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Auctions component and may allow low-privilege attackers to gain access via HTTP network connections, thereby taking control of Sourcing...

Oracle Primavera P6 Enterprise Project Portfolio Management: Vulnerabilities in Permissions and Access Control

Versions of Oracle Primavera P6 Enterprise Project Portfolio Management from 21.12.0.0 to 21.12.21.9 and from 22.12.0.0 to 22.12.21.4, as well as versions from 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8, have vulnerabilities related to permission licensing and access control...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access data via the HTTP network, enabling unauthorized access to certain accessible data...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through HTTP networks. They can unauthorizedly update, insert, or delete certain...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component, and they could allow low-privilege attackers to take control of the Oracle E-Business Suite Integrated SOA Gateway...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Folders, Files & Attachments component. It may allow low-privilege attackers to access critical data through HTTP network requests, potentially leading to unauthorized access to key information or...

Oracle Materials Requirement Planning security vulnerability

A security vulnerability exists in Oracle Materials Requirement Planning versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges to gain access to Materials Requirement Planning via HTTP network...

Security vulnerabilities in Oracle E-Business Suite Integrated SOA Gateway

Security vulnerabilities exist in Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the SOA Provider component, potentially allowing unauthenticated attackers to gain access via HTTP. This could result in unauthorized...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Diagnostics component and may allow low-privilege attackers to access certain accessible data via HTTP without authorization...

Mozilla Thunderbird encryption issues and vulnerabilities

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 have a security vulnerability related to encryption. This vulnerability arises from the fact that when setting up an account, Exchange AutoDiscover queries are made via plaintext HTTP. Unencrypted requests include user-input credentials...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Analytic Server component. Attackers can exploit these vulnerabilities through HTTP network access, causing the service to become suspended or crash...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Analytic Server component, which may allow low-privilege attackers to access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Content Server component. It may allow attackers with low privileges to access through the HTTP network, enabling unauthorized updates, insertions, or deletion of certain accessible dat...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access the system via the HTTP network, resulting in...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. They may allow low-privilege attackers to access critical data or all accessible data through HTTP...