Oracle Utilities Network Management System security vulnerabilities

The Oracle Utilities Network Management System versions from 2.4.0.1.0 to 2.4.0.1.33, 2.5.0.1.0 to 2.5.0.1.18, 2.5.0.2.0 to 2.5.0.2.11, 2.6.0.1.0 to 2.6.0.1.12, 2.6.0.2.0 to 2.6.0.2.10, and 25.12.0.0.0 to 25.12.0.0.2 contain security vulnerabilities. These vulnerabilities stem from System Wide...

Oracle JD Edwards EnterpriseOne Tools Authorization Vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. They may allow unauthorized attackers to access via an HTTPS network, unauthorized creation, deletion, or...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access the system via an HTTPS network. Unauthorized attacker...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through an HTTPS network, to make unauthorized updates, insert or delete certain accessible data, and to...

Oracle BI Publisher security vulnerability

Oracle BI Publisher version 12.2.1.4.0 contains a security vulnerability stemming from issues within the BI Platform Security component. This vulnerability may allow low-privilege attackers to access certain accessible data over the HTTPS network without authorization...

Oracle Timesten In-memory Database security vulnerabilities

The Oracle Timesten In-memory Database versions 22.1 to 22.1.40.0 and 26.1 to 26.1.1.2.0 have security vulnerabilities. These vulnerabilities stem from issues with the Kubernetes Operator component. This may allow attackers with low privileges to access data through an HTTPS network, enabling...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 19.1.0.0.0 to 19.32.0.0.0, 21.3, 21.23, and 23.4 to 23.26.3.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Server Executable component, which may allow low-privilege attackers to access and control Oracle GoldenGate via an...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. Vulnerable attackers may gain access through an HTTPS network. Unauthorized updates, insertions, or deletions of certain accessible data are...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and take control of Oracle Mobile Fie...

Oracle APEX authorization issue vulnerabilities

Versions of Oracle APEX from 24.1.0 to 24.1.21, from 24.2.0 to 24.2.20, and from 26.1.0 to 26.1.4 contain authorization issue vulnerabilities. These vulnerabilities stem from issues with the General component, which may allow unauthenticated attackers to access and take control of Oracle APEX...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and control Oracle Mobile Field Service via an HTTPS network...

Vulnerability related to permission and access control issues in Oracle Partner Management

Versions 12.2.3 through 12.2.15 of Oracle Partner Management contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Internal Operations component. It may allow attackers with limited privileges to access via HTTPS, thereby...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via an HTT...

Oracle MySQL Router security vulnerabilities

The Oracle MySQL Router version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Router: General component. They may allow unauthorized attackers to access through an HTTPS network, resulting in unauthorized creation, deletion, or modification of critical...

Oracle Utilities Network Management System security vulnerabilities

A security vulnerability exists in Oracle Utilities Network Management System versions 2.6.0.1.0 through 2.6.0.1.12, 2.6.0.2.0 through 2.6.0.2.10, and 25.12.0.0.0 through 25.12.0.0.2. This vulnerability stems from a System Wide component issue, potentially allowing unauthenticated attackers to...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow low-privilege attackers to gain access to Oracle Identity Manager via the HTTPS network...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, allowing attackers with low permissions to access data through an HTTPS network, thereby enabling...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow unauthorized attackers to access critical data via an HTTPS network, or to access all accessible data...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low permissions to access and take control of Oracle...