CVE Vulnerability Catalog

Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack does not extend beyond this product (no scope change).

Vulnerability in Oracle WebCenter Content (Content Server) version 14.1.2.0.0. An attacker with low privileges and local access can compromise data confidentiality and integrity. The attack may impact other products (scope change).

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via T3 and IIOP, allowing takeover of the system. CVSS score 9.8.

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing unauthorized modification of data, partial read access, and partial denial of service. CVSS score 9.9.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit by unauthenticated attacker with network access via HTTP, allowing unauthorized creation, deletion or modification of critical data as well as unauthorized access to critical data. CVSS 7.4 (Confidentiality and Integrity impact).

Vulnerability in Oracle Unified Directory (OUD Core component) versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker can gain unauthorized access to critical data via LDAP. The attack does not extend beyond this product (no scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.

Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP. The attack does not extend beyond this product (no scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.

Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).

Vulnerability in Oracle's PeopleSoft Enterprise PeopleTools product (component: Tuxedo) affects versions 8.61-8.63. It is difficult to exploit but allows a low-privileged attacker with local access to take over the system. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit, requires low privileges and LDAP access, allowing unauthorized creation, deletion, or modification of critical data and full access to data.

Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an unauthenticated attacker remotely via LDAP. Successful attacks can result in unauthorized access to critical data or complete access to all data in Oracle Unified Directory.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges, HTTP access, and user interaction, allowing unauthorized update, insert, or delete access and read access to a subset of data. Attacks may impact additional products.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: PeopleCode) affects versions 8.61-8.63. It is easily exploitable by a high-privileged attacker remotely via HTTP. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Configuration Manager) affects versions 8.61-8.63. It is easily exploitable by a low-privileged attacker remotely via SQL. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.

Vulnerability in PeopleSoft Enterprise PeopleTools (component: Data Mover) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges, local access, and user interaction. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as partial denial of service.

Vulnerability in Service Delivery Platform (component: Messaging Enabler) affects version 14.1.2.0.0. It is easily exploitable by an unauthenticated attacker via HTTP, allowing unauthorized update, insert, or delete access and read access to a subset of data.

Vulnerability in Service Delivery Platform (component: Messaging Enabler) affects versions 14.1.2.0.0 and 12.2.1.4.0. It is easily exploitable by a high-privileged attacker via HTTP, allowing unauthorized access to critical data or full access to data. Attacks may impact additional products.

Vulnerability in Service Delivery Platform (Messaging Enabler component) versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by low-privileged attacker with network access via Oracle Net, allowing unauthorized modification and full data access. CVSS score 9.6.