CVE Vulnerability Catalog

Vulnerability in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can update, insert or delete data and gain unauthorized read access to a subset of data.

Vulnerability in the Sales Order Entry component of Oracle JD Edwards EnterpriseOne Sales Order Entry version 9.2. A low-privileged attacker with network access via JDENET can gain unauthorized access to critical data or all accessible data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can gain unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via SOAP can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to update, insert or delete it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker able to log on to the infrastructure hosting WebCenter Content can easily exploit the flaw to gain unauthorized access to critical data; the attack may impact additional products (scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with access to the physical communication segment attached to the hardware running WebCenter Content can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with HTTP network access can, with difficulty and requiring user interaction, exploit the flaw; the attack may impact additional products (scope change) and result in unauthorized access to critical data and its update, insert or delete.

Vulnerability in Oracle Applications Framework (Web Utilities component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with HTTP network access can easily exploit the flaw to gain unauthorized access to critical data.

A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network access via HTTP to cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 6.5 (availability impact).

A vulnerability in Oracle Agile PLM (Folders, Files & Attachments component) in version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (confidentiality impact).

A vulnerability in Oracle WebCenter Content (Content Server component) in version 12.2.1.4.0 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some WebCenter Content accessible data. CVSS 3.1 Base Score 4.3 (integrity impact).

A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, requiring human interaction. CVSS 3.1 Base Score 5.3 (confidentiality impact).

A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Panel Processor component) in versions 8.61-8.63 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access and unauthorized read access to a subset of data, requiring human interaction and potentially impacting additional products (scope change). CVSS 3.1 Base Score 4.4.

Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) affects versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0. A low privileged attacker with network access via HTTPS can gain unauthorized read access to a subset of accessible data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Porting) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure, requiring user interaction, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.