CVE Vulnerability Catalog

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle Virtual Directory. Affected versions are 11.1.1.7.0 and 11.1.1.9.0.

Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.

Vulnerability in the Oracle FLEXCUBE Universal Banking component allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle FLEXCUBE Universal Banking.

A vulnerability in the PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge) allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Attacks may significantly impact additional products, leading to unauthorized access to data and partial denial of service.

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI) allows easy exploitation by a low privileged attacker with network access via HTTP. This can lead to unauthorized access to critical data and complete access to all Oracle Hospitality Hotel Mobile accessible data.

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.

Vulnerability in the PeopleTools component of Oracle PeopleSoft allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data in PeopleSoft Enterprise PT PeopleTools.

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) affects versions 16.0 and 17.0. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to unauthorized access to data and partial denial of service.

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in Oracle Universal Work Queue.

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.

Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires human interaction from a person other than the attacker, which increases the risk of significant consequences for other products.

A vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires user interaction, which may lead to unauthorized access to critical data.

Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.

Vulnerability in the Core RDBMS component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. It allows easy exploitation by a low privileged attacker with Create session privilege, potentially leading to the takeover of Core RDBMS.

A vulnerability in the Oracle Hyperion BI+ component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.

Vulnerability in the Oracle Hyperion Financial Reporting component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized access to critical data or complete access to all data accessible in Oracle Hyperion Financial Reporting.

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) allows an attacker with network access to compromise the system. It requires user interaction, increasing the risk of unauthorized data access and the potential for partial denial of service.

Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, increasing the risk for the organization.