CVE Vulnerability Catalog

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to and modify critical data, but human interaction is required. The vulnerability may also impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via TCP can gain unauthorized access to critical data or all accessible data. The vulnerability may also impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A high-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data. The vulnerability may also impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the system. It can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to it.

Vulnerability in Oracle Purchasing within Oracle E-Business Suite (component: G-Invoicing) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).

Vulnerability in Oracle Report Manager within Oracle E-Business Suite (component: Reports Security) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data and partial denial of service (partial DoS).

Vulnerability in Oracle Financials for Asia/Pacific within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.8-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to it, and partial denial of service (partial DoS).

Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).

Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data and modification, and the attack may impact additional products (scope change).

Vulnerability in Oracle Banking Origination within Oracle Financial Services Applications (component: Onboarding Batch Processes) affecting versions 14.5.0.0.0-14.9.0.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Banking Origination.

Vulnerability in Oracle Product Hub within Oracle E-Business Suite (component: Item Catalog) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).

Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.

Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.

Vulnerability in Oracle US Federal Human Resources (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can perform unauthorized creation, deletion, or modification of critical data and gain unauthorized read access to a subset of data.

Vulnerability in Oracle Advanced Benefits (component: Self-serv What-if Analysis) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Advanced Benefits, potentially impacting additional products.

Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.