436 matches found
Zoho ManageEngine OpManager - SQL Injection
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...
ROOT-OS-DEBIAN-12-CVE-2025-39751 CVE-2025-39751 in rootio-linux - Patched by Root
Root has patched CVE-2025-39751 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-61279
CVE-2026-61279 affects Oracle E-Business Suite Proposals (component: Proposals). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Proposals, potentially enabling unauthorized update/insert/delete and...
CVE-2026-61132
...
CVE-2026-61087
CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...
CVE-2026-61084
...
CVE-2026-60984
CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...
CVE-2026-60962
CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...
CVE-2026-60864
CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...
CVE-2026-60829
CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...
CVE-2026-60817
CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...
CVE-2026-60700
The CVE-2026-60700 entry concerns Oracle E-Business Suite Oracle Universal Work Queue (UWQ) server issues. Affected are 12.2.3–12.2.15; the flaw allows unauthenticated, HTTP-accessible remote compromise, with human interaction required, leading to unauthorized creation/deletion/modification of UW...