2180 matches found
CVE-2022-21247: Undefined Security Weakness
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to compromise...
CVE-2022-21387: Undefined Security Weakness
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2022-21325: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2022-21312: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2022-21357: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2022-21295: Undefined Security Weakness
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...
PT-2022-2123
Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 12.0.0.3.0 through 12.0.0.4.0 Description The issue exists due to insufficient input validation in the On Premise Install component of Oracle Communications Pricing Design Center. This allow...
PT-2022-2121
Name of the Vulnerable Software and Affected Versions Oracle Communications Billing and Revenue Management versions 12.0.0.3 through 12.0.0.4 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Communications Billing and Revenue Management...
CVE-2022-21331: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
PT-2022-1996
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.57 through 8.59 Description The issue exists due to insufficient input validation in the Weblogic component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain read...
CVE-2022-21311: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2022-21268: Undefined Security Weakness
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Pipeline Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the...
CVE-2021-35686: Undefined Security Weakness
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Unified Metadata Manager. Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privileged attacker with...
PT-2022-2196
Name of the Vulnerable Software and Affected Versions Oracle Communications Operations Monitor versions 3.4, 4.2, 4.3, 4.4, 5.0 Description The issue exists due to insufficient input validation in the Mediation Engine component of Oracle Communications Operations Monitor. This allows a remote...
CVE-2022-21313: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to...
CVE-2022-21388: Undefined Security Weakness
Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications component: On Premise Install. Supported versions that are affected are 12.0.0.3.0 and 12.0.0.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...
CVE-2022-21317: Undefined Security Weakness
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2021-35687: Undefined Security Weakness
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Unified Metadata Manager. Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2022-21282: Improper Restriction of XML External Entity Reference
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...
CVE-2022-21267: Undefined Security Weakness
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Pipeline Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the...