Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. Attackers with low privileges can access through the HTTP network, potentially leading to unauthorized updates, insertions, or deletions of accessible...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 23.4 through 23.26.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Client Executable component. They could allow attackers with high privileges to access critical data or all data accessible by Oracle GoldenGate via the HTTP...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP component. They may allow unauthorized attackers to access through the HTTP network, to perform unauthorized updates, insert or delete certain...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Oracle Siebel CRM End User Cross-site Request Forgery Vulnerability

The Oracle Siebel CRM End User versions from 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with Open UI components, allowing unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of accessibl...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain accessible data are possible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through the HTTP network, allowing PeopleSoft Enterprise PeopleTools to take control o...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues in the helidon-common-mapper component, potentially allowing unauthenticated attackers to gain HTTP access. They may create, delete, or modify critical data or all...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Database Server component. It may allow unauthenticated attackers to gain HTTP access, causing the service to hang or crash frequently under user...

Oracle Cost Management security vulnerability

A security vulnerability exists in Oracle Cost Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Cost Maintenance component and may allow attackers with limited privileges to gain HTTP access and take control of Oracle Cost Management...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertion, or deletion of some accessible data, as...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow low-privilege attackers to gain control over Oracle Identity Manager via HTTP network access...

Oracle Siebel CRM Deployment information disclosure vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain an information disclosure vulnerability. This vulnerability stems from issues within the Cloud Gateway component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthenticated attackers can access critical data or all data through the HTTP...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may access critical data or all data through the HTTP network without proper authorization...

Oracle Payroll security vulnerability

A security vulnerability exists in Oracle Payroll versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Element Types, Links, and Entries components, potentially allowing low-privilege attackers with HTTP network access to create, delete, or modify critical data or all...