6798 matches found
CVE-2025-62287
CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...
CVE-2025-62288
CVE-2025-62288 affects Oracle Health Sciences Data Management Workbench (Logger component). Affected versions are 3.4.0.1.3 and 3.4.1.0.10. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access, leading to unauthorized access to critical data or full access t...
CVE-2025-62287
...
CVE-2025-61759
...
CVE-2025-61757
...
CVE-2025-61758
CVE-2025-61758 affects Oracle PeopleSoft IT Asset Management (PeopleSoft Enterprise FIN IT Asset Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to access sensitive data, with confidentiality impact. Oracle and multiple advisories note fix...
CVE-2025-61749
...
CVE-2025-53071
...
CVE-2025-53070
...
CVE-2025-53070
...
CVE-2025-53066
CVE-2025-53066 affects Oracle Java SE and GraalVM components (Security and JAXP). Affected releases include Oracle Java SE 8u461, 11.0.28, 17.0.16, 21.0.8, 25; GraalVM for JDK 17.0.16/21.0.8; GraalVM Enterprise Edition 21.3.15. The flaw enables unauthenticated network-accessed compromise, with po...
CVE-2025-53064
Oracle E-Business Suite OA Framework Personalization is affected in versions 12.2.3–12.2.14. The vulnerability enables a low-privilege, unauthenticated attacker with HTTP access to cause unauthorized updates/inserts/deletes to OA Framework data. The Oct 2025 CPU advisories from Oracle (and NCSC/R...
CVE-2025-53065
CVE-2025-53065 affects Oracle PeopleSoft PeopleTools (PIA Core Technology) in versions 8.60, 8.61 and 8.62. An unauthenticated attacker with HTTP network access can compromise PeopleSoft Enterprise PeopleTools and may perform unauthorized updates, inserts or deletes, as well as reading restricted...
CVE-2025-53061
The CVE-2025-53061 entry concerns Oracle PeopleSoft’s PeopleTools (PIA Core Technology) with affected versions 8.60, 8.61 and 8.62. Documents consistently describe an easily exploitable vulnerability that allows a high-privilege attacker, over HTTP with network access, to perform unauthorized upd...
CVE-2025-53046
CVE-2025-53046 affects Oracle ZFS Storage Appliance Kit (Analytics) for product line Oracle Systems, with vulnerable version 8.8. The root cause is an attackable condition that, when exposed to a network attacker with HTTP access, can lead to a hang or frequently repeatable crash (complete DOS) o...
CVE-2025-53043
...
CVE-2025-53041
...
CVE-2025-53040
CVE-2025-53040 is a vulnerability in Oracle MySQL’s Server: Optimizer. It affects MySQL Server components on versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash ...
CVE-2025-50074
CVE-2025-50074 affects Oracle Financial Services Revenue Management and Billing (component: Security Management System) in versions 2.9.0.0.0 through 7.2.0.0.0. The vulnerability allows a high-privilege attacker with network access over HTTP to obtain unauthorized access to sensitive data or full...
