Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability allows high-privilege attackers to access data through the HTTP network. It may lead to unauthorized updates, insertions, or deletions of accessible data, as well as...

Oracle Siebel CRM Cloud Applications information leakage vulnerability

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have information leakage vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing unauthorized attackers to access through the HTTP network and read certain accessible data without proper...

Oracle Shipping Execution security vulnerability

The Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all accessible...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access the HTTP network and unauthorized access to certain data accessible by Helidon...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow attackers with low privileges to access certain accessible data via HTTP, resulting in unauthorized reading of such data...

Oracle Essbase security vulnerabilities

The Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all data at large...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data as well as all...

Oracle Solaris information leakage vulnerability

Oracle Solaris 11.4 has a vulnerability related to information leakage, originating from issues with the Image Packaging System component. This vulnerability allows unauthorized attackers to access critical data or all accessible data through HTTP network connections...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as well as...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Integration Broker component. Unauthorized attackers may gain access through the HTTP network, requiring user interaction. This allows unauthorized access ...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers with low privileges may exploit these vulnerabilities to gain control of Siebel CRM Cloud Applications through HTTP...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to create, delete, or modify critical data or all data...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Unauthenticated attackers can access the system via the HTTP network. User interaction is required. This may lead to unauthorized...

Oracle HCM Common Architecture security vulnerabilities

Oracle HCM Common Architecture versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle HCM Common Architecture through HTTP network access...

Oracle Order Management security vulnerability

A security vulnerability exists in Oracle Order Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Product Diagnostic Tools component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network...

org.apache.camel.k:camel-k-itests-knative (>=3.2.0, <=3.15.3), org.apache.camel.k:camel-k-itests-knative-consumer (>=3.2.0, <=3.15.3) +20 more potentially affected by CVE-2026-85247 via org.apache.camel:camel-knative-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.7.0, =3.4.0, =3.8.1, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.14.0 and mo...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the configureOptions method in the Knative HTTP client. An attacker on the network path can impersonate the server and read TLS traffic by intercepting connections when SSL is enabled without a...