Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Metadata Plugin component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or access all data tha...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain accessible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges can access data via the HTTP network. They can also perform unauthorized updates, insertions, or deletions ...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-grpc-server component. Unauthorized attackers may gain access through HTTP/2 networks, allowing them to perform unauthorized updates, insert or delete certain accessible...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient component. Unauthorized attackers may gain access through the HTTP network, allowing them to read unauthorized access to certain data available on...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Security component and may allow unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to critical data or...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. They could allow low-privilege attackers to gain control of Oracle iSetup throu...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow unauthenticated attackers to take control of Workflow through HTTP network access...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component, which may allow unauthenticated attackers to access critical data or all accessible data via the HTTP network...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Java Server Issues component, which may allow low-privilege attackers to take control of Oracle One-to-One Fulfillment through HTTP network access...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-websocket component. Unauthorized attackers may gain access through HTTP network connections, read certain accessible data without authorization, and...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Server component, which may allow unauthorized attackers to access critical data or all accessible data via HTTP network connections...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. They may allow attackers with high privileges to access through the HTTP network, leading to unauthorized access to certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Fluid Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through the HTTP network, read certain data without authorization, and cause...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the REST components, allowing unauthorized attackers to access through the HTTP network. Unauthorized data can be read under user interaction...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. Unauthorized attackers may gain access through HTTP network interactions and user interactions,...