Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Backend-as-a-Service component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can unauthorizedly update, insert, ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. They may allow attackers with high privileges to access through the HTTP network, leading to unauthorized access to certain accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and is difficult to exploit. It may allow unauthenticated attackers to access certain accessible data via HTTP,...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component. Attackers with low privileges could exploit these vulnerabilities to gain network access and use the HTTP...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access, interact with users, and unauthorizedly...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access through the HTTP network, potentially leading to unauthorized update...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow low-privilege attackers to access certain accessible data via HTTP requests while interacting with users, thereby...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Data Transforms component. They may allow unauthorized attackers to access critical data or all data through HTTP network connections. Additionally, they may...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the SQR component and may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP network access...

Oracle Marketing security vulnerabilities

Oracle Marketing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Audience component. They may allow unauthorized attackers to access key data or all data via the HTTP network, as well as to update, insert, or delete certain data without...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Agent Next Gen component, which may allow attackers with low privileges to gain control of the Oracle Enterprise Manager Base Platform through HTTP network...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to access certain data within Oracle Essbase via HTTP, resulting in unauthorized reading of that data...

Oracle Applications Framework input validation error vulnerability

Versions 12.2.3 through 12.2.15 of the Oracle Applications Framework contain an input validation error vulnerability. This vulnerability stems from issues within the Security component and may allow unauthenticated attackers to gain access via HTTP on user interaction, thereby gaining unauthorize...

Oracle Business Process Management Suite authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Business Process Management Suite contain an authorization issue vulnerability. This vulnerability stems from issues within the Human Workflow component and may allow unauthenticated attackers to gain access to Oracle Business Process Management Suite...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow unauthenticated attackers to access certain data accessible via HTTP without authorization...