CVE Vulnerability Catalog

Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.

Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, and the attack may impact additional products (scope change).

Vulnerability in Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can, under difficult conditions, gain unauthorized access to critical data, modify or delete it, and cause partial denial of service.

Vulnerability in Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain full access to critical data, modify some data, and cause partial denial of service.

Vulnerability in Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to completely take over Oracle Spares Management.

Vulnerability in Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify or delete it.

Vulnerability in the RDBMS component of Oracle Database Server. Affected versions are 23.4.0-23.26.3. Easily exploitable issue allows an attacker with Authenticated User privilege via Oracle Net to cause complete denial of service (hang or frequent crashes) in RDBMS, and attacks may impact additional products.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affected versions are 22.3-26.7. Difficult to exploit issue allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify or delete it, and attacks may impact additional products.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affected versions are 22.3-26.7. Easily exploitable issue allows a low-privileged attacker via HTTP to completely take over Siebel CRM Cloud Applications.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affected versions are 22.3-26.7. Easily exploitable issue allows a low-privileged attacker with access to the physical communication segment to gain unauthorized access to critical data, modify some data, and cause partial denial of service, and attacks may impact additional products.

Vulnerability in Oracle Marketing product of Oracle E-Business Suite (component: Audience). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain unauthorized access to critical data, and attacks may impact additional products.

Vulnerability in Oracle Marketing product of Oracle E-Business Suite (component: Audience). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify some data, and attacks may impact additional products.

Vulnerability in Oracle Marketing product of Oracle E-Business Suite (component: Audience). Affects versions 12.2.3-12.2.15. Easily exploitable, allows a high privileged attacker with network access via HTTP to take over Oracle Marketing.

Vulnerability in Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Affects versions 14.5.0.0.0-14.9.0.0.0. Difficult to exploit, allows unauthenticated attacker with physical access to the communication segment to compromise integrity and confidentiality, with potential impact on other products.

Vulnerability in Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Affects versions 14.5.0.0.0-14.9.0.0.0. Difficult to exploit, requires user interaction, allows low privileged attacker to take over the system.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affects versions 22.3-26.7. Easily exploitable, allows high privileged attacker with local access to compromise integrity and confidentiality, with potential impact on other products.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affects versions 22.3-26.7. Easily exploitable, allows unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and modify some data.

Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affected versions are 22.3-26.7. A low-privileged attacker with network access via HTTP can compromise Siebel CRM Cloud Applications, leading to unauthorized update, insert, delete, and read access to some data, with potential impact on additional products (scope change).

Vulnerability in Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle HR Intelligence (though difficult to exploit), leading to unauthorized creation, deletion, or modification of critical data and complete denial of service.