388 matches found
EUVD-2026-106488
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...
CVE-2026-91233
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...
CVE-2026-91233
The Oracle SOA Suite product within Oracle Fusion Middleware is affected by a vulnerability in the Enterprise Scheduling System component. Impacted versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via SOAP can easily exploit this vulnerability to compro...
PT-2026-119765
Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description An issue exists in the Enterprise Scheduling System component of Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can...
EUVD-2026-46903
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-60541: Improper Access Control
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
PT-2026-62583
Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description An issue exists in the Enterprise Scheduling System component of the Oracle SOA Suite within Oracle Fusion Middleware. An unauthenticated attacker with netwo...
CVE-2026-60538: Missing Authentication for Critical Function
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Enterprise Scheduling System. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
EUVD-2025-33359
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
PT-2025-41444
Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description The Simple Scheduling System is susceptible to Cross Site Scripting XSS through the Subject Description field. This allows for the injection of malicious scripts into the...
Code-Projects Simple Scheduling System security vulnerabilities
Code-Projects Simple Scheduling System is an open source simple scheduling system from Code-Projects. A security vulnerability exists in Code-Projects Simple Scheduling System version 1.0, which stems from the vulnerability of the Subject Description field to cross-site scripting attacks...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input within the Subject Description field, which allows for the injection of malicious scripts into the application. To remediate this, it is recommended to u...
CVE-2025-60304: Improper Neutralization of Input During Web Page Generation
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...