PT-2021-7188

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.3.1.5 Description The issue is related to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce...

PT-2021-7199

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Marketing Administration component of Oracle Marketing. It...

PT-2021-7142

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Shared Components version 9.2 Description The issue is related to insufficient input validation in the Person Search component. It allows a high-privileged attacker with network access via HTTP to compromise PeopleSof...

PT-2021-7146

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.5 Description The issue is related to insufficient input validation in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

PT-2021-7130

Name of the Vulnerable Software and Affected Versions Oracle E-Records versions 12.1.1 through 12.1.3 Oracle E-Records versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the E-signatures component of Oracle E-Records, part of the Oracle E-Business...

Oracle Fusion Middleware security vulnerabilities

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A security vulnerability exists in the Outside In Filters...

CVE-2021-2406: Undefined Security Weakness

Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Collaborative...

CVE-2021-2443: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2434: Undefined Security Weakness

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2360: Undefined Security Weakness

Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite component: AME Page rendering. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Approvals...

CVE-2021-2415: Undefined Security Weakness

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Timecard. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and...

CVE-2021-2335: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access vi...

Oracle E-Business Suite input validation error vulnerability

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is a seamless integration of a management suite.Oracle...

CVE-2021-2445: Undefined Security Weakness

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: Lifecycle Management. The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion...

Oracle Fusion Middleware security vulnerabilities

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. An...

CVE-2021-2361: Undefined Security Weakness

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2455: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle Applications Framework Input Validation Error Vulnerability

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite. Oracle Workflow...

CVE-2021-2366: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.12.0-17.12.20, 18.8.0-18.8.23, 19.12.0-19.12.14 and 20.12.0-20.12.3. Easily exploitable vulnerability allows...

PT-2021-7182

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.5.0 Description The issue is related to insufficient input validation in the Lifecycle Management component. It allows a high-privileged attacker with network access via HTTP to compromise...