CVE-2022-21359: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Optimization Framework. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2022-21382: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21369: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2022-21273: Undefined Security Weakness

Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite component: Expenses, Currency Override. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

Oracle Communications Applications 输入验证错误漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation. A security vulnerability exists in Oracle Communications Applications' Oracle Communications Pricing Design Center product that could allow a low-privileged attacker to...

CVE-2022-21248: Undefined Security Weakness

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerabili...

CVE-2022-21378: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle. Oracle Solaris suffers from a security vulnerability that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.A successful attack would require human-computer...

Oracle Solaris 安全漏洞

Oracle Solaris is a set of UNIX operating systems from Oracle. Oracle Solaris has a security vulnerability that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.A successful attack would require human-computer...

CVE-2022-21262: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server is vulnerable to an input validation error that can be exploited by attackers to cause unauthorized creation, deletion, or modification of critical data or all MySQL Server-accessible data...

Oracle Construction and Engineering Suite 安全漏洞

Oracle Construction and Engineering Suite is a portfolio management solution suite product for construction projects from Oracle Corporation. A security vulnerability exists in Oracle Construction and Engineering Suite's Primavera Portfolio Management product that could allow an attacker with...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software, and Oracle Financial Services Analytical Applications is a financial services analytics software. Oracle Financial Services Applications is a financial services software. Analytical Applications is a financial...

Oracle Construction and Engineering Suite 输入验证错误漏洞

Oracle Construction and Engineering Suite is a portfolio management solution suite product for construction projects from Oracle Corporation. A security vulnerability in Oracle Construction and Engineering Suite's Primavera Portfolio Management product could allow an unauthenticated attacker to...

CVE-2022-21246: Undefined Security Weakness

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

PT-2022-2135

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Samples component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HT...

CVE-2022-21278: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2022-2012 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.32 Description: The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, potentially impacting additional...

CVE-2022-21367: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Compiling. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2022-21673

Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an API token and no other user credentials will forward the OAuth Identity of the most recently...