CVE Vulnerability Catalog

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affecting versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or all accessible data, and the attack may impact additional products.

Vulnerability in Oracle Secure Backup (component: Device Management and Support) affecting versions 19.1.0.0.0 and 19.1.0.1.0. A low-privileged attacker with logon to the infrastructure where the component executes can cause a hang or frequently repeatable crash (complete denial of service), and the attack may impact additional products.

Vulnerability in Oracle Secure Backup (component: NDMP daemon). An unauthenticated attacker with network access via TCP can easily exploit this vulnerability, resulting in unauthorized read access to a subset of Oracle Secure Backup accessible data.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, but successful attacks require human interaction. This can result in unauthorized update, insert or delete access to some Siebel Apps - Marketing accessible data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). A low privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Primavera Unifier accessible data.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Oracle Product Lifecycle Analytics accessible data.

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A high privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can exploit this difficult-to-exploit vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). A high privileged attacker with logon to the infrastructure where Siebel CRM Development executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Development (component: Integration - Scripting) affecting versions 17.0-26.9. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and complete access to all accessible data.

Vulnerability in Oracle Siebel CRM Development (component: Configuration Tools) affecting versions 17.0-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.