Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Unauthenticated attackers can access data via the HTTP network and exploit interactions with non-attacker users. This allows...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They are difficult to exploit, and it is possible for unauthenticated attackers to access critical data or all accessible data throu...

Oracle Siebel CRM Integration information leakage vulnerability

The Oracle Siebel CRM Integration version 25.12 to 26.9 has a vulnerability related to information leakage. This vulnerability stems from issues with the Open Integration component, allowing unauthorized attackers to access critical data or all accessible data through HTTP network access without...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Process Scheduler component. They may allow low-privilege attackers to access through the HTTP network, requiring user interaction. This can lead to...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to access the system via HTTP. Such unauthorized access could...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain access via HTTP, potentially leading to unauthorized access to critical or all...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other Issues component and are difficult to exploit. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critic...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. It is possible for attackers with low privileges to gain control of Oracle Essbase through HTTP network access...

Oracle Zfs Storage Appliance Kit security vulnerabilities

The Oracle Zfs Storage Appliance Kit version 8.8 has a security vulnerability. This vulnerability stems from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the RDBMS components, and they could allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorization...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It is difficult to exploit this vulnerability, but it may allow unauthenticated attackers to gain control of the product...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to access certain Oracle Purchasing data via HTTP, enabling unauthorized updates, insertions, o...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow low-privilege attackers to take control of the Oracle Essbase through HTTP network access, and may also significantly affect other products...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. Th...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webserver-http2 component. The vulnerabilities are difficult to exploit, and unauthenticated attackers can cause denial-of-service attacks by accessing through HTTP/2...