CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. Exploited by attackers with low privileges, this vulnerability allows them to log in and execute infrastructure tasks requiring user interaction. It may lead to...

Oracle Siebel Apps - Financial Services security vulnerabilities

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. They may allow unauthorized attackers to access through the SMTP network, to perform unauthorized updates,...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...

Oracle Siebel Apps – Marketing Cross-site Request Forgery Vulnerability

Oracle Siebel Apps – Versions 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. After user interaction, unauthorized updates, insertions, or deletion...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to access critical or all accessible data via HTTP over the network, as well as unauthorized updates,...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component and are difficult to exploit. Unauthenticated attackers can log in and execute actions on the infrastructure, potentially damaging...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Application Server - JRE component. Unauthorized attackers may gain access through an SSH network, allowing them to perform unauthorized updates, insertion...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and is difficult to exploit. It may allow unauthenticated attackers to access certain accessible data via HTTP,...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 Dev Platform Tech - UNIX component. They may allow high-privilege attackers to log into JD Edwards EnterpriseOne Tools and execute unauthorized...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability stems from issues with the BAM Framework component, which may allow unauthenticated attackers to access through the HTTP network, enabling them to perform unauthorized...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...

Oracle Siebel CRM End User Authorization Vulnerability

Oracle Siebel CRM End User versions 17.0 to 26.9 have authorization issues. This vulnerability stems from Open UI components, allowing unauthorized attackers to access through the HTTP network and perform unauthorized updates, insertions, or deletions on certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from WebLogic component issues and are difficult to exploit. Attackers who are unauthenticated and have access to the physical communication segments connected to the PeopleSof...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through HTTP network requests, allowing them to perform unauthorized updates, insert dat...