Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow low-privilege attackers to access critical data or all data through HTTP network interactions, without user...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow low-privilege attackers to create, delete, or modify critical data or all accessible...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has a security vulnerability. This vulnerability stems from issues with the Content Server component, which may allow attackers with low privileges to access through the HTTP network and unauthorizedly read certain accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component, which may allow unauthenticated attackers to gain access via the HTTP network and take control of JD Edwards...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues in the Analytics Web Administration component. This vulnerability may allow highly privileged attackers to gain control over Oracle Business...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. They could allow high-privilege attackers to gain access through the HTTP network and take control of Oracle EDI Gateway...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with HTML UI components. Unauthorized attackers may gain access through the HTTP network. Without proper authorization, unauthorized updates, insertions, or deletions of certain...

Oracle HRMS (India) security vulnerabilities

A security vulnerability exists in Oracle HRMS India versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Indian Payroll component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical or all accessible data...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical data or...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers with low privileges may access data through the HTTP network, allowing them to read certain accessible...

Oracle Payroll security vulnerability

A security vulnerability exists in Oracle Payroll versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and is difficult to exploit. It allows attackers with low privileges to exploit it via HTTP network access, potentially leading to the...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 2.6 contains a security vulnerability stemming from an issue in the Acollect component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to critical data or all accessible data...

Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Fabric Layer component, which may allow unauthenticated attackers to access through the HTTP network, potentially gaining control of the Oracle SOA Suit...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow attackers with low privileges to access critical data or all accessible data through the HTTP network, without requiring user...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Platform Security component. Unauthorized attackers may exploit these vulnerabilities to gain access via the HTTP network, requiring user...

Oracle ZFS Storage Appliance Kit security vulnerability

Oracle ZFS Storage Appliance Kit version 8.8 contains a security vulnerability stemming from issues in its Core component. This vulnerability may allow attackers with limited privileges to gain access to the Oracle ZFS Storage Appliance Kit via HTTP network access...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through HTTP network requests, allowing them to perform unauthorized updates, insert dat...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...