CVE Vulnerability Catalog

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. A high-privileged attacker with network access via HTTP can exploit it, potentially impacting other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.

Vulnerability in JD Edwards EnterpriseOne Tools (Web Runtime SEC component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Affected versions are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).

Vulnerability in Oracle Applications Manager (Oracle E-Business Suite, Application Logging Interfaces component) versions 12.2.3-12.2.14. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).

Vulnerability in JD Edwards EnterpriseOne Tools (Object and Environment Tech component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. An unauthenticated attacker with network access via HTTP can exploit it, but user interaction is required. The vulnerability may impact other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.

A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.

A vulnerability in Oracle MySQL Server (Server: DML component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.

Vulnerability in Oracle Workflow (Oracle E-Business Suite, Workflow Notification Mailer component) versions 12.2.3-12.2.14. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).

Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Affected versions are 23.4-23.9. A high privileged attacker with SYSDBA privilege and network access via Oracle Net can compromise RDBMS Functional Index, resulting in unauthorized read access to a subset of data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Performance Monitor). Affected versions are 8.60, 8.61, and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web Administration component) affects versions 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable by high privileged attacker with network access via HTTP, requires user interaction, and may impact additional products (scope change). CVSS 8.4.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Rich Text Editor) in versions 8.60, 8.61, and 8.62. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to data (read and modify).

A vulnerability in the Portable Clusterware component of Oracle Database Server allows an unauthenticated attacker with network access via Bonjour to compromise Portable Clusterware. Successful attacks can result in unauthorized read access to a subset of data. Affects versions 19.3-19.28, 21.3-21.19, 23.4-23.9.

Vulnerability in Oracle ZFS Storage Appliance Kit (Analytics component) version 8.8. A high-privileged attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DOS) of the appliance. CVSS 3.1 Base Score 4.9 (Availability impacts).

Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1.

A vulnerability in MySQL Server (component: Server: Optimizer) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged attacker with network access can cause a hang or frequent crashes (complete DoS) of MySQL Server. CVSS 4.9.

Vulnerability in Oracle iStore (component: Shopping Cart) of Oracle E-Business Suite, affecting versions 12.2.5-12.2.14. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. Successful attacks can lead to unauthorized update, insert, or delete access to some Oracle iStore data and unauthorized read access to a subset of data.