Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthenticated attackers to access critical data via the HTTP network, unauthorized access to...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Attackers with low privileges and access to the network via HTTP may be able to unauthorizedly create, delete, or modify critical data or all...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In PDF Export SDK component. It may allow unauthorized attackers to gain access through the HTTP network, thereby taking control of Oracle Outside In Technology when user...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component, which may allow attackers with low privileges to gain control of JD Edwards EnterpriseOne Tools through HTTP network access...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability stems from issues with the BAM Framework component, which may allow unauthenticated attackers to access through the HTTP network, enabling them to perform unauthorized...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Object and Env Tech SEC components. They may allow unauthorized attackers to access critical data through HTTP network connections, or to gain full...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, potentially leading to service suspension or frequent crashes...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow attackers with high privileges to gain network access via HTTP, thereby taking control of Oracle Agile Product...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, potentially allowing unauthorized attackers to access through the HTTP network. This may lead to unauthorized updates,...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Generic REST component. Unauthorized attackers may gain access through HTTP network requests, allowing them to access critical data or fully acce...

Oracle Agile Product Lifecycle Management For Process authorization issue vulnerability

Oracle Agile Product Lifecycle Management for Process version 6.2.4 contains an authorization issue vulnerability. This vulnerability stems from issues within the Product Quality Management component and may allow unauthenticated attackers to create, delete, or modify critical data or all...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Fluid Core component. Unauthorized attackers with low privileges may access the system via the HTTP network. This allows them to perform unauthorized...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP without user interaction, as well...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the batchupg function, which allows for OS command injections. Attackers can trigger this vulnerability through specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-google-login component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain data without proper authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network access...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, resulting i...