Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Web General component. Unauthorized attackers may gain access via the HTTP network, causing the service to han...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of Oracl...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all accessible data, unauthorized updates, insertions, or...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. Unauthorized attackers may exploit these vulnerabilities to gain access through the HTTP network,...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle Application Object Library Authorization Vulnerability

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have an authorization issue vulnerability. This vulnerability stems from Core component problems and could allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. They are difficult to exploit. Attackers with high privileges and access via HTTP can exploit these vulnerabilities to...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. The vulnerabilities are difficult to exploit. Attackers with high privileges can access data via the HTTP network, potentially leading to unauthorized...

Oracle Siebel Apps – Marketing Cross-site Request Forgery Vulnerability

Oracle Siebel Apps – Versions 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. After user interaction, unauthorized updates, insertions, or deletion...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or deletions of...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OIDC component. Unauthorized attackers may gain access through the HTTP network, allowing them to access critical data or all accessible data under user interaction...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Service API component. Vulnerable attackers with low privileges could access the system via the HTTP network. This allows them to update, insert, or delete...

Oracle Primavera Unifier security vulnerabilities

Versions of Oracle Primavera Unifier from 21.12.0 to 21.12.17 and 22.12.0 to 22.12.15, from 23.12.0 to 23.12.16, from 24.12.0 to 24.12.16, and from 25.12.0 to 25.12.9 contain security vulnerabilities. These vulnerabilities are due to issues with the Logging component, which may allow low-privileg...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 21.12.0 to 21.12.17 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthorized attackers to access through the HTTP network. This could result in unauthorized creation, deletion, or modification of...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the Core component; unauthenticated attackers can access it via HTTP. Under user interaction, unauthorized updates, insertions, or deletions of certain accessible...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to access critical or all accessible data via HTTP over the network, as well as unauthorized updates,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. It is possible for attackers with low privileges to access and exploit JD Edwards EnterpriseOne Tools via the...

Oracle Service Bus security vulnerabilities

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network, causing the service to become suspended or crash frequently...