Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component. It may allow unauthorized attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates, insertions, or deletions of...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorized updates, insertions, or deletions of certain...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerabilities

The Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Strategic Sourcing component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow unauthenticated attackers to access key data or all data through the HTTP network, as well as to authorize the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertions, or deletions of some...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues in the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTTP...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow unauthenticated attackers to access it via HTTP, enabling unauthorized updates, insertions, or deletions of certain...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Applications DBA security vulnerabilities

A security vulnerability exists in Oracle Applications DBA versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical...

Oracle PeopleSoft Enterprise PeopleTools resource management vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have a resource management vulnerability. This vulnerability stems from issues with the Business Interlink component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access through the HTTP network, to perform unauthorized updates, insertions, or deletions of certain accessible data, to...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthorized attackers may access key data or all accessible data via the HTTP network. They may also create, delet...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues in its Build component. This vulnerability may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in exposure of critical data or all accessible data...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Transaction Entry component. Unauthorized attackers with low privileges may access critical data or all accessible data via the HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the QAS component. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain accessible data without...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Backend-as-a-Service component. Unauthorized attackers may gain access through the HTTP network. This allows them to perform unauthorized updates, insertions, or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component, which may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This allows...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to gain HTTP access and take control of Oracle Outside In Technology...

Eclipse ThreadX – NetX Duo: Improper exception handling leads to vulnerabilities

Eclipse ThreadX – The version 6.4.2 to 6.5.1.202602 of NetX Duo contains security vulnerabilities. These vulnerabilities arise from the HTTP server of Web Add-ons detecting a Content-Length overflow when processing PUT requests. This leads to the dereferencing and release of uninitialized pointer...