Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues within the Analytics Web General component. Low-privilege attackers can exploit this vulnerability via HTTP network access and by leveraging hum...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, and require interaction from someone other than the attacker. This...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow low-privilege attackers to access certain accessible data via HTTP. They can then make unauthorized updates, insert, or delete...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data through network HTTP requests, enabling unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...

Oracle Siebel CRM End User security vulnerability

A security vulnerability exists in Oracle Siebel CRM End User versions 17.0 through 26.9. This vulnerability stems from issues within the Communications Panel/Dashboard component, potentially allowing unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Process Scheduler component. They may allow low-privilege attackers to access through the HTTP network, requiring user interaction. This can lead to...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow low-privilege attackers to access through the HTTP network, perform unauthorized...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.2.1 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow low-privilege attackers to access through the HTTP network, to perform unauthorized updates, insertions, or deletions of certain...

Oracle Primavera P6 Enterprise Project Portfolio Management security vulnerabilities

Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0.0 to 21.12.21.9, 22.12.0.0 to 22.12.21.4, 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8 have security vulnerabilities. These vulnerabilities stem from issues with the Web Access component, which may...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow highly privileged attackers to gain SQL network access, thereby unauthorizedly accessi...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow unauthenticated attackers to access it via HTTP, enabling unauthorized updates, insertions, or deletions of certain...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability allows high-privilege attackers to access data through the HTTP network. It may lead to unauthorized updates, insertions, or deletions of accessible data, as well as...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, which may allow unauthorized attackers to access through the JDENET network. Unauthorized updates, insertions, or deletions...

Oracle PeopleSoft Enterprise FIN Cash Management security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Cash Management 9.2 version has a security vulnerability. This vulnerability stems from issues with the Cash Management component. It requires user interaction to be exploited. Attackers with high privileges who log in to the infrastructure running this produc...

Oracle PeopleSoft Enterprise FIN Inventory Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1 contains a security vulnerability stemming from an issue in the Inventory component. This vulnerability may allow attackers with limited privileges to log in and execute infrastructure tasks, thereby performing unauthorized updates,...

EUVD-2026-47030

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-60337

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...