Lucene search
K

523 matches found

OSV
OSV
added 2021/10/20 11:16 a.m.1 views

CVE-2021-35562

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access vi...

8.1CVSS5.8AI score0.01264EPSS
Exploits0References1
NVD
NVD
added 2021/10/20 11:16 a.m.14 views

CVE-2021-35562

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access vi...

8.5CVSS0.01264EPSS
Exploits0References1
Prion
Prion
added 2021/10/20 11:16 a.m.20 views

Design/Logic Flaw

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access vi...

8.5CVSS8AI score0.01264EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/20 10:50 a.m.11 views

CVE-2021-35562

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access vi...

8.1CVSS6.8AI score0.01264EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/10/20 10:50 a.m.18 views

CVE-2021-35562

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access vi...

8.1CVSS7.8AI score0.01264EPSS
Exploits0References1
CVE
CVE
added 2021/10/20 10:50 a.m.51 views

CVE-2021-35562

CVE-2021-35562 affects Oracle E-Business Suite Universal Work Queue (Work Provider Site Level Administration). Affects versions 12.1.1–12.1.3 and 12.2.3–12.2.10. Root cause not explicitly detailed in the provided documents, but impact per CVSS is high: low-privilege, network (HTTP) attacker can c...

8.5CVSS7.6AI score0.01264EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/10/20 12:0 a.m.16 views

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2022-02349)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite...

8.5CVSS3.4AI score0.01264EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.2 views

Oracle E-Business Suite和Oracle Universal Work Queue 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite...

8.5CVSS5.7AI score0.01264EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.1 views

The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks allows a malicious actor to disclose protected information or gain access to the creation, modification, or deletion of data.

The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker...

8.5CVSS6.7AI score0.00931EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/05/31 3:39 p.m.19 views

GSD-2021-1000024 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/05/31 3:39 p.m.8 views

UVI-2021-1000030 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/05/31 3:39 p.m.7 views

UVI-2021-1000024 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/04/22 10:15 p.m.2 views

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

8.1CVSS6.6AI score0.00931EPSS
Exploits0References1
NVD
NVD
added 2021/04/22 10:15 p.m.14 views

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

8.1CVSS0.00931EPSS
Exploits0References1
CVE
CVE
added 2021/04/22 9:53 p.m.63 views

CVE-2021-2246

CVE-2021-2246 targets Oracle E-Business Suite, specifically the Oracle Universal Work Queue’s Work Provider Site Level Administration. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise the Work Queue, leading to una...

8.1CVSS8.1AI score0.00931EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/04/22 9:53 p.m.11 views

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

8.1CVSS6.9AI score0.00931EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/04/22 9:53 p.m.18 views

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

8.1CVSS8.3AI score0.00931EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.4 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamless integration of a management suite.Oracle Universal...

8.1CVSS5.6AI score0.00931EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.1 views

The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, is related to insufficient validation of input data. Exploiting this vulnerability could all...

10CVSS8AI score0.02154EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.1 views

The vulnerability of the Internal Operations component of the application’s access, organization, and interaction with various types of tasks in the Oracle Universal Work Queue system—a business automation tool within the Oracle E-Business Suite—allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the application for accessing, organizing, and interacting with various types of work in the Oracle Universal Work Queue system, a business automation solution from Oracle E-Business Suite, is related to insufficient validation of input...

9CVSS7.7AI score0.01805EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder