CVE Vulnerability Catalog

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction and may significantly impact additional products (scope change). Successful attacks may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, causing a hang or frequently repeatable crash (complete DoS).

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized creation, deletion, or modification access to critical data or all Oracle REST Data Services accessible data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, which may significantly impact additional products (scope change), resulting in unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability requiring human interaction, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the ADP component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access to data accessible through the service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A high-privileged attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions, cause unauthorized creation, deletion, or modification of critical data.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access to data accessible through the service.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.

A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A high-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations, gain unauthorized read access to a subset of data, and cause a partial denial of service.

A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access, requiring user interaction, can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data, potentially impacting additional products.