CVE Vulnerability Catalog

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can cause a partial denial of service.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations, read a subset of data, and cause a partial denial of service.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. A high-privileged attacker with logon to the Essbase infrastructure can gain unauthorized access to critical or all Essbase data, with possible impact on additional products.

Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. An unauthenticated attacker with TCP network access can gain unauthorized read access to a subset of Essbase data.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via T3 or IIOP can perform unauthorized update, insert or delete operations, read a subset of data, and cause a partial denial of service.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.

Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via T3 or IIOP can gain unauthorized read access to a subset of Oracle Essbase accessible data.

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with logon to the infrastructure where Oracle Essbase executes can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low privileged attacker with network access via HTTP can gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).

Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).

Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.

Vulnerability in Oracle Middleware Common Libraries and Tools (Remote Diagnostic Agent component) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.

Vulnerability in the Java VM component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. A difficult to exploit flaw allows a low-privileged attacker with network access via SOCKS5 to perform unauthorized creation, deletion or modification of critical data.