Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of Oracle Agile Product Lifecycle Management for Process through...

Oracle Agile Product Lifecycle Management For Process security vulnerability

A security vulnerability exists in Oracle Agile Product Lifecycle Management for Process version 6.2.4. This vulnerability stems from issues within the Product Quality Management component and may allow attackers with limited privileges to gain access to Oracle Agile Product Lifecycle Management...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. This may allow attackers with low privileges to access critical data or all data through HTTP network access without proper...

Oracle WebCenter Sites authorization issue vulnerability

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the WebCenter Sites component, which may allow unauthenticated attackers to gain control of Oracle WebCenter Sites through HTTP network access...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Server component. Attackers with low privileges can exploit these vulnerabilities by accessing data via the HTTP network. This allows unauthorized...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Capacity through HTTP network access...

Bulwark Mail webmail server request forgery vulnerability

Versions of Bulwark Mail’s webmail prior to 1.9.2 have a server-side request forgeing vulnerability. This vulnerability stems from the unauthenticated POST /api/fetch-ical endpoint using a check-first-pattern approach; DNS verification and socket connection resolution are inconsistent, which may...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin UI components. Unauthorized attackers may gain access through HTTP network connections. They can create, delete, or modify critical data or all accessible da...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers to access critical data via HTTP, enabling unauthorized access to key data or full access to...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-common-concurrency-limits component. Unauthenticated attackers can access through the HTTP network, resulting in unauthorized updates, insertions, or deletions ...

ASUS Router authorization issue vulnerability

The ASUS Router 3.0.0.4.388 series has an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, allowing unauthorized nearby users to send specific commands via HTTP requests. This causes the router to return device identification...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the system through HTTP network access...

Oracle Helidon authorization issue vulnerability

Oracle Helidon versions 4.0.0 to 4.5.5 have an authorization issue vulnerability. This vulnerability stems from issues with the helidon-microprofile-security component. It may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all data...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access critical data or all data via the HTTP network, and may cause partial denial-of-service attacks...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access critical data through HTTP network...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critica...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certai...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...