Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 version has a security vulnerability. This vulnerability stems from issues with the Visual Analyzer component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues within the Analytics Web General component. Low-privilege attackers can exploit this vulnerability via HTTP network access and by leveraging hum...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 version has a security vulnerability. This vulnerability stems from issues with the BI Foundation component. It may allow attackers with low privileges to access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may gain access through HTTP network connections, allowing them to access critical data or acce...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 Dev Platform Tech - UNIX component. They may allow unauthorized attackers to access through the HTTP network. Under user interaction, unauthorized...

Oracle iSupplier Portal security vulnerabilities

The Oracle iSupplier Portal versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0 and 14.1.1.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. The vulnerabilities are difficult to exploit. Unauthorized attackers can access them via the HTTP...

Oracle Document Management and Collaboration security vulnerabilities

Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Attachments component. They may allow low-privilege attackers to access critical data through HTTP network requests without user interaction. This...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Majel Mobile Service component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. Unauthorized attackers can exploit these vulnerabilities through HTTP network access. This may lead to unauthorized creation,...

Apache Tomcat race condition vulnerability

There are concurrency issues with Apache Tomcat versions 11.0.22 to 11.0.26, 10.1.55 to 10.1.60, and 9.0.118 to 9.0.122. These issues stem from improper object recycling and reuse during HTTP/2 asynchronous Servlet processing, which may lead to confusion between requests and/or responses between...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities are caused by issues with the SAP ERP+ component. They may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, o...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow unauthenticated attackers to access the system via HTTP, enabling them to unauthorizedly update, insert, or delete certa...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow attackers with low privileges to gain access to Oracle Identity Manager via HTTP network access...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues with the Java Based Agent component. This vulnerability may allow unauthenticated attackers to gain HTTP access and unauthorizedly read certain accessible data within Oracle Essbase...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow attackers with limited privileges to exploit HTTP access to compromise and take control of the Siebel CRM...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow low-privilege attackers to take control of Workflow through HTTP network access...