CVE-2023-22107: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: UI Components. Supported versions that are affected are ECC: 8, 9 and 10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2023-22094: Undefined Security Weakness

Vulnerability in the MySQL Installer product of Oracle MySQL component: Installer: General. Supported versions that are affected are Prior to 1.6.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Installer executes to compromise MySQL...

CVE-2023-22124: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-22093: Undefined Security Weakness

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Requisition and Vacancy. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment...

PT-2023-6390

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0, 7.0.0.0.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Dashboards component. It allows a low-privileged attacker with...

CVE-2023-22096: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise...

PT-2023-6210

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.20 Oracle Database Server versions 21.3 through 21.11 Description The issue is related to insufficient input validation in the Java VM component of Oracle Database Server. This allows a...

PT-2023-6225

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description The issue is related to insufficient input validation in the Requisition and Vacancy component of Oracle iRecruitment. It allows an unauthenticated attacker with network acces...

PT-2023-6387 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.33 and prior Description: The issue is related to a vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: Security: Encryption component. This vulnerability allows a high privileged...

CVE-2023-22080: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

PT-2023-6295

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.59 through 8.60 Description The issue is related to insufficient input validation in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to compromi...

PT-2023-6207 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can be...

Improper Authorization

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Improper Authorization due to improper handling of authorization checks. An attacker can bypass security features and access unauthorized data witho...

GHSA-GRC6-R6F8-XJ7C Magento Open Source allows Improper Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

CVE-2023-38220

Adobe Commerce / Magento Open Source versions 2.4.7-beta1 and earlier (including 2.4.6-p2, 2.4.5-p4, 2.4.4-p5 and earlier) are affected by an Improper Authorization vulnerability that can bypass security features to access unauthorized data, with exploitation not requiring user interaction. Conne...

Adobe Commerce 授权问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. An authorization issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stemmed from improper privilege management in the...

Asset Suite EAM SSO Access Bypass

The vulnerability of the Single Sign-On SSO implementation for managing enterprise asset management in the energy sector, Asset Suite EAM, is related to deficiencies in authentication procedures due to incorrect password input. Exploiting this vulnerability can allow unauthorized users to bypass...

Elasticsearch SD-WAN Manager Unauthorized Access

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage centralized network management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

MediaTek WLAN Driver Unauthorized Access

The vulnerability of the WLAN driver software developed by MediaTek relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Dell SmartFabric Storage Software 输入验证错误漏洞

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software has an input validation error vulnerability that originates from a RADIUS configuration containing incorrect input validation. An attacker could exploit the vulnerability ...