CVE Vulnerability Catalog

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). A low privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Primavera Unifier accessible data.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Oracle Product Lifecycle Analytics accessible data.

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A high privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can exploit this difficult-to-exploit vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). A high privileged attacker with logon to the infrastructure where Siebel CRM Development executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Development (component: Integration - Scripting) affecting versions 17.0-26.9. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and complete access to all accessible data.

Vulnerability in Oracle Siebel CRM Development (component: Configuration Tools) affecting versions 17.0-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows a high privileged attacker with network access via HTTP to gain unauthorized create, delete or modify access to critical data and unauthorized read access to a subset of data; attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. Requires high privileges and logon to the infrastructure, but can lead to unauthorized access to critical data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with local logon, it can cause a hang or frequently repeatable crash (complete DoS) and unauthorized data modification and read access.