Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, enabling unauthorized access to key data or full access to all data accessib...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle One-to-One...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the SQR component and may allow low-privilege attackers to gain network access via HTTP, thereby taking control of PeopleSoft Enterprise PeopleTools...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow attackers with low privileges to access critical data or all data via the HTTP network. Additionally, unauthorized updates,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component, potentially allowing unauthenticated attackers to gain HTTP access and unauthorized access to critic...

Oracle JD Edwards EnterpriseOne Tools authorization issue vulnerability

Versions 9.2.0.0 through 9.2.26.5 of Oracle JD Edwards EnterpriseOne Tools contain an authorization issue vulnerability. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access. Such attackers can then...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Data Provider UI component. This may allow attackers with low privileges to access critical data or all accessible data via the HTTP network. Additionally, unauthorized...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers with network access to unauthorizedly access critical data or all data via HTTP. Additionall...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They are difficult to exploit. Attackers with low privileges can attempt attacks through the HTTP network, potentially causing Oracle...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the ADP component. Unauthorized attackers may exploit these vulnerabilities to access the system via HTTP. This could lead to unauthorized updates, insertions, or deletio...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Bills of Material through HTTP network access...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component, which may allow unauthenticated attackers to access through the HTTP network and take control of Oracle Agile PLM during user interactions...

ASUS Router buffer error vulnerability

The ASUS Router ASUSWRT 3.0.0.4386 series and ASUSWRT 3.0.0.4388 series versions have a buffer error vulnerability. This vulnerability arises from the lack of checking input size before buffer copying, which may allow adjacent authenticated users to manipulate device operations by submitting...

Oracle Email Center security vulnerability

A security vulnerability exists in Oracle Email Center versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Message Component component, potentially allowing unauthenticated attackers to gain access via HTTP. Under user interaction, they may update, insert, or delete...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities. These vulnerabilities stem from issues with the Kernel component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Service Bus authorization issue vulnerability

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component problems, and it may allow low-privilege attackers to take control of Oracle Service Bus through HTTP network access...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow low-privilege attackers to take control of Oracle Solaris through HTTP network access...

Oracle PeopleSoft Enterprise SCM Purchasing security vulnerability

Oracle PeopleSoft Enterprise SCM Purchasing version 9.2 contains a security vulnerability stemming from issues in the Supplier Registration component. This vulnerability may allow low-privilege attackers to perform unauthorized updates, inserts, or deletions of certain accessible data via HTTP, a...