Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow attackers with low privileges and access through the network to unauthorizedly read certain...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; as well as in Oracle GraalVM versions 17.0.20.1 and 21.0.12.1, and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues withi...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow low-privilege attackers to gain network access via HTTP, leading to service hangs or frequent crashes complete denial of service, and potentially unauthorized readi...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle PeopleSoft Enterprise FIN Cash Management security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Cash Management 9.2 version has a security vulnerability. This vulnerability stems from issues with the Cash Management component. It requires user interaction to be exploited. Attackers with high privileges who log in to the infrastructure running this produc...

PT-2026-63195

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2025-42960

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description An easily exploitable issue exists in the PeopleSoft Enterprise PeopleTools PIA Core Technology component. A low-privileged attacker with network access via HTTP can compromise the syste...

PT-2025-42982

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2 Description A flaw exists within the Work Order Management component of Oracle PeopleSoft Enterprise FIN Maintenance Management. A low-privileged attacker with network access via HTTP can compromise the system...

Oracle Health Sciences Applications security vulnerabilities

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in Oracle Life Sciences InForm version 7.0.1.0 for Oracle Health Sciences Applications, which originates from an HTTP web access...

CVE-2023-22105

Vulnerability in the BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks requir...

PT-2020-20362

Name of the Vulnerable Software and Affected Versions Asylo versions prior to 0.6.0 Description A buffer length validation issue allows an attacker to read unauthorized data. The enc untrusted recvfrom function generates a return value deserialized by MessageReader and copied into three extents...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read data...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read data...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28214)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28216)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28217)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28219)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...