CVE Vulnerability Catalog

Vulnerability in Oracle Enterprise Manager Base Platform (Security Framework component) affecting versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.

Vulnerability in Oracle TimesTen In-Memory Database (TimesTen IMDB component) affecting versions 22.1-22.1.1.43.0. A low-privileged attacker with logon access to the infrastructure where the database runs can exploit it to gain unauthorized access to critical data or complete access to all database accessible data.

Vulnerability in Oracle Utilities Network Management System (component: System Wide) affects multiple supported versions. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all system data.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: Libraries) affects multiple supported versions. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle WebLogic Server (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all server data.

Vulnerability in the RDBMS component of Oracle Database Server affects versions 23.4.0-23.26.3. An easily exploitable flaw allows a low-privileged attacker with no special privileges and network access via HTTP to gain unauthorized access to critical data or complete access to all RDBMS data.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin) affects versions 13.5 and 24.1. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of platform data.

Vulnerability in the Oracle Net Services component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. An easily exploitable flaw allows a high-privileged attacker with no special privileges and logon to the infrastructure to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services.

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) affects version 26.1. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all product data.

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) affects version 26.1. A difficult to exploit flaw requiring human interaction allows a low-privileged attacker with logon to the infrastructure to perform unauthorized update, insert or delete access, unauthorized read access to a subset of data and cause a partial DOS, with potential impact on additional products.

Vulnerability in Oracle Global Lifecycle Management OPatchAuto (component: Database extensions) affects versions 12.2.0.1.16-12.2.0.1.52. An easily exploitable flaw requiring human interaction allows a high-privileged attacker with logon to the infrastructure to take over the product.

Vulnerability in Oracle Identity Manager (component: Connector Framework) affects versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to cause a partial DOS of Oracle Identity Manager.

Vulnerability in Oracle REST Data Services (component: Core) affecting versions 24.2.0-26.2.1. A low-privileged attacker with network access via HTTP can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. A difficult-to-exploit HTTP attack by an unauthenticated attacker requires human interaction and may impact additional products, allowing unauthorized modification and read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of data, and the attack may impact additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data and cause a partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.