CVE Vulnerability Catalog

Vulnerability in Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data). Affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub, resulting in takeover.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.

Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Difficult to exploit vulnerability requires logon to infrastructure and human interaction, but can result in takeover of Oracle Hyperion Financial Management.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.

Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Affects versions 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to access critical data in Siebel CRM Integration.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the product, leading to unauthorized access to critical data or all accessible data, and cause a partial denial of service.

Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server) versions 3.0.0-3.2.17. An unauthenticated attacker via HTTP can cause a hang or frequently repeatable crash (complete DoS) of Helidon.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE). An unauthenticated attacker over the network (TLS) can cause a partial denial of service (partial DoS).

Vulnerability in Oracle Java SE (component: 2D) versions 25.0.4 and 26.0.2. An unauthenticated attacker with network access via multiple protocols can cause a hang or frequently repeatable crash (complete DoS) of Java SE. The vulnerability can be exploited via APIs in the component, e.g., through a web service supplying data to APIs, and also applies to Java deployments running sandboxed applications.

Vulnerability in Oracle Access Manager (component: Agent infrastructure) allows an unauthenticated attacker with network access via SAML to compromise the system. The attack is easily exploitable and requires no user interaction.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTPS, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure where the system runs can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over the Oracle Hyperion Data Relationship Management system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTPS), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).