CVE Vulnerability Catalog

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges and logon to infrastructure. Successful attack can lead to takeover of PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized modification of data and complete denial of service.

Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of the system.

Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and impact other products.

Vulnerability in Oracle Platform Security for Java (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit but requires no authentication and is accessible via HTTP. Successful attack can lead to takeover of the system.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can exploit it, but human interaction from another person is required. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via T3 or IIOP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.

Vulnerability in Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high privileged attacker via HTTP to take over the product, with impact on other products (scope change). CVSS 9.1.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can exploit it, but human interaction is required. This can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can exploit it, though it is difficult. This can lead to takeover of Oracle Access Manager and impact additional products (scope change).

Vulnerability in Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows high privileged attacker via HTTP to take over the product, with impact on other products (scope change). CVSS 9.1.

Vulnerability in Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to take over the platform. CVSS 9.8.

Vulnerability in Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via HTTP to take over the platform, with impact on other products (scope change). CVSS 9.9.

Vulnerability in Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via T3, IIOP to take over the platform, with impact on other products (scope change). CVSS 9.9.

Vulnerability in Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via T3, IIOP to take over the platform, with impact on other products (scope change). CVSS 9.9.

Vulnerability in Oracle Platform Security for Java (Centralized Thirdparty Jars component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.