CVE Vulnerability Catalog

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. An easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise it, potentially resulting in takeover.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16 and applies to Windows hosts only. An easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise it, potentially resulting in takeover.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16 and applies to Windows hosts only. An easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise it, potentially resulting in takeover.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure where VirtualBox runs to take over the product. This vulnerability applies to Windows hosts only.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure where VirtualBox runs to take over the product. This vulnerability applies to Windows hosts only.

Vulnerability in Oracle VM VirtualBox (Core component) version 7.2.16. A low-privileged attacker with network access via RDP, under difficult exploitation conditions, can cause a hang or frequent crashes (complete DoS).

Vulnerability in Oracle Agile PLM (component: Application Server) affecting version 9.3.6. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.

Vulnerability in Oracle Purchasing (component: Other issue) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data and gain unauthorized access to critical information.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Integration Broker) affecting versions 8.61-8.63. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to data and to update, insert or delete it.

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to gain unauthorized access to data and to update, insert or delete it, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with access to the physical communication segment to create, delete or modify data and gain unauthorized access to it.

Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to create, delete or modify data and gain unauthorized access to it, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) affecting version 9.3.6. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to data and to update, insert or delete it, but it requires human interaction and may significantly impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: SDK) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: Application Server) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).

Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6, difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over Oracle Agile PLM. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Agile PLM (Web Client component) version 9.3.6. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized update/insert/delete and read access to data. The attack may impact additional products (scope change).

Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. An unauthenticated attacker with physical access to the communication segment can gain unauthorized access to critical data and modify or delete it.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify it. Requires user interaction and may impact additional products (scope change).