CVE-2026-61221

Vulnerability in the Oracle Item Master product of Oracle E-Business Suite component: iSet-up bugs. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Item Master. Successful...

CVE-2024-21027: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2023-2654

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.7.3 Description The issue is related to insufficient input validation in the Web Runtime SEC component. It allows a low-privileged attacker with network access via HTTP to compromise JD...

CVE-2022-33937

Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...

PT-2019-16414

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.8 Description The issue allows an unauthenticated attacker with logon to the infrastructure where the system executes to compromise it. Successful attacks can result in...

PT-2018-15711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require huma...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...