CVE Vulnerability Catalog

Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily compromise Oracle WebCenter Sites.

Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle WebCenter Sites. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.

Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.

Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can easily compromise Oracle WebCenter Sites.

Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via T3 or IIOP can unauthorizedly create, delete or modify critical data, read a subset of data, and cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 8.3.

Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can easily gain unauthorized access to data, including creation, deletion, and modification.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Identity Manager Connector can gain unauthorized access to data, including creation, deletion, and modification.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over the connector, and the impact may extend to additional products (scope change). CVSS 3.1 Base Score 8.3.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via TCP to unauthorizedly create, delete or modify critical data and access all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.7.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with logon access to the infrastructure where the connector executes can take over the connector. CVSS 3.1 Base Score 7.8.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.6.

Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit, requires access to the physical communication segment and user interaction. Successful attack can lead to takeover of the system.

Vulnerability in Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Affects versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to take over the server, with impact on other products (scope change). CVSS 10.0.

Vulnerability in Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to take over the product, with impact on other products (scope change). CVSS 10.0.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and complete denial of service.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker with logon to infrastructure. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges and user interaction. Successful attack can lead to takeover of PeopleTools and impact other products.