PT-2022-3107

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.4.3 and 6.5.1 Description The issue is related to the User Interface component of Oracle Transportation Management. It allows an unauthenticated attacker with network access via HTTP to compromise th...

Oracle PeopleSoft Products产品输入验证错误漏洞

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. An Access Control Error vulnerability exists in Oracle PeopleSoft...

CVE-2022-21449: Undefined Security Weakness

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows...

PT-2022-2425

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.6.3 Description The issue exists due to insufficient input validation in the Web Runtime component of JD Edwards EnterpriseOne Tools. This allows a remote attacker to compromise the system,...

PT-2022-3121

Name of the Vulnerable Software and Affected Versions Oracle Banking Treasury Management version 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Treasury Management. Successful attacks require human interaction from a person...

PT-2022-3109

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the...

CVE-2022-21453: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2022-3111

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.58 through 8.59 Description The issue is related to insufficient input validation in the Process Scheduler component. It allows an unauthenticated attacker with network access via HTTP to compromise...

Oracle Solaris 输入验证错误漏洞

Oracle Solaris is a set of UNIX operating systems from Oracle. Oracle Solaris suffers from an Access Control Error vulnerability that stems from improper access control. A low-privileged attacker could exploit the vulnerability to cause unauthorized access to critical data or full access to all...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and MySQL Connectors is one of the drivers for connecting to applications that use MySQL. product contains an input validation error vulnerability...

CVE-2022-21498: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

CVE-2022-21496: Undefined Security Weakness

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

CVE-2022-21434: Undefined Security Weakness

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

CVE-2022-21411: Undefined Security Weakness

Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking, and estate management.FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. A security vulnerability exists in...

Oracle PeopleSoft Enterprise PRTL Interaction Hub输入验证错误漏洞

Oracle PeopleSoft Enterprise PRTL Interaction Hub is an Enterprise Portal Interaction Center component from Oracle Corporation. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PRTL Interaction Hub product that could allow a low-privileged attacker with network access...

PT-2022-3116

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.58 through 8.59 Description The issue exists due to insufficient input validation in the Navigation Pages, Portal, Query component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote...

Oracle Solaris 输入验证错误漏洞

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in Oracle Systems' Oracle Solaris product that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.The vulnerability could be...

PT-2022-2434

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u331, 8u321, 11.0.14, 17.0.2, 18 Oracle GraalVM Enterprise Edition versions 20.3.5, 21.3.1, 22.0.0.2 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and...

PT-2022-3115

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Web Services Security component. It allows an unauthenticated attacker with network access via HTTP to...