Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthorized attackers to access key data, all data, as well as update, insert, or delete certain data through...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Payroll through HTTP network access...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify...

Oracle HRMS (Norway) security vulnerabilities

A security vulnerability exists in Oracle HRMS Norway versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical dat...

Apache CouchDB resource management error vulnerability

Apache CouchDB versions 3.5.2 and earlier contain a resource management error vulnerability. This vulnerability stems from a lack of circuit breakers in the replicator, potentially allowing the owner of either the replication source or target to trigger a denial-of-service condition by creating a...

Oracle PeopleSoft Enterprise PeopleTools information leakage vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. They may allow attackers with high privileges to access data through the HTTP network, enabling unauthorized access to certa...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthenticated attackers to access through the HTTP network, potentially causing certain types of denial-of-service attacks...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the ADP component. Unauthorized attackers may exploit these vulnerabilities to access the system via HTTP. This could lead to unauthorized updates, insertions, or deletio...

Oracle Demand Planning security vulnerabilities

Oracle Demand Planning versions 12.1 and 12.2 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with low privileges to access critical data or all accessible data via HTTP, without requiring user interaction...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through the HTTP network. They can also perform unauthorized updates, insertions, or...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.1. This vulnerability stems from issues within the GraphQL component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical...

Oracle Complex Maintenance Repair And Overhaul security vulnerabilities

Oracle Complex Maintenance Repair And Overhaul has security vulnerabilities. These vulnerabilities stem from issues with the LOV component and are difficult to exploit. Unauthorized attackers may access critical data or all accessible data via the HTTP network, and unauthorized access to critical...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.2. This vulnerability stems from issues with the General component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of Oracle REST Data Services...

IBM i Authorization Issues Vulnerabilities

Versions of IBM i 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper access control. Unauthenticated remote attackers can send specially crafted HTTP requests to any URL within the Navigator application before authentication is completed...

Oracle EDI Gateway: Vulnerabilities in permission management and access control mechanisms

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to gain control of Oracle EDI Gateway throug...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access through the HTTP network, potentially causing the service to hang or crash frequently...