Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. Exploited by attackers with low privileges, this vulnerability allows them to log in and execute infrastructure tasks requiring user interaction. It may lead to...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data via the HTTP network. These attackers are not authorized to create,...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They could allow attackers with high privileges to log in and execute infrastructure-related tasks. Unauthorized updates, insertions, or deletions of...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. They may allow unauthorized attackers to access through the SMTP network, to perform unauthorized updates,...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow low-privilege attackers to access critical data and all accessible data through the HTTP network. Unauthorized...

Oracle Product Lifecycle Analytics security vulnerabilities

Oracle Product Lifecycle Analytics 3.6.1 has a security vulnerability. This vulnerability stems from issues with the Installation Issues component. It may allow low-privilege attackers to log in and access critical data or all data, without proper authorization, and may cause partial...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Business Logic Infra SEC component. They may allow low-privilege attackers to access JDENET via the network, enabling unauthorized access to certain...

Vulnerability related to permission and access control issues in Oracle Partner Management

Versions 12.2.3 through 12.2.15 of Oracle Partner Management contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Internal Operations component. It may allow attackers with limited privileges to access via HTTPS, thereby...

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland security vulnerability

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 contains a security vulnerability stemming from issues within the Global Payroll for Switzerland component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, perform unauthorized...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-dns-resolver-round-robin component. They may allow unauthorized attackers to access the DNS network, enabling them to update, insert, or delete certai...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain data are possible, as well a...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component and may allow low-privilege attackers to access via the JDENET network, potentially leading to partial...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. The supported versions affected include Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4, and 22.3.0. This easily exploitable vulnerability...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. The supported versions affected by this vulnerability are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This...

Astra Linux – vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Concurrency. Affected versions include Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Exploitation is difficult, allowing unauthenticated...

Astra Linux – vulnerability in openjdk-11

A vulnerability exists in the Oracle Java SE and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: JAXP. Affected versions include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, and 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily exploitab...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK products developed by Oracle Java SE component: Utility. Affected versions include Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; and Oracle GraalVM...

Astra Linux – vulnerability in openjdk-11

A vulnerability exists in the Java SE component ImageIO within the Oracle GraalVM Enterprise Edition product. Affected versions include Java SE: 7u311, 8u301, 11.0.12, and 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. This easily exploitable vulnerability enables an unauthenticated...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: ImageIO. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerabili...