CVE Vulnerability Catalog

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch) affecting versions 12.2.3-12.2.15. An authenticated attacker with local logon can exploit it if another person performs a specific action, leading to takeover of Applications DBA.

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone) affecting versions 12.2.3-12.2.15. A low-privileged attacker with local logon can gain unauthorized access to critical data and create, delete, or modify data.

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Applications Manager, potentially impacting other products.

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. A low-privileged attacker with XDKC privilege and network access via Oracle Net can take over Oracle XML Developers Kit.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with access to the physical communication segment can access critical data and cause hangs or repeatable crashes (DoS).

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTPS can take over Siebel CRM Deployment.

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and create, delete, or modify data.

Vulnerability in Oracle Application Testing Suite affecting version 13.3.0.1. An unauthenticated attacker with local logon can exploit it if another person performs a specific action, leading to takeover of Oracle Application Testing Suite.

Vulnerability in Oracle Application Testing Suite affecting version 13.3.0.1. A low-privileged attacker with Test Manager for Web Apps privilege and network access via HTTP can take over Oracle Application Testing Suite.

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory) affecting version 9.1. A low-privileged attacker with local logon can take over PeopleSoft Enterprise FIN Inventory Brazil.

Vulnerability in Oracle Siebel CRM End User product (Open UI component). Affects versions 17.0-26.7. Difficult to exploit, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Customer Order Management product (Order Management component). Affects versions 17.0-26.7. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Customer Order Management product (Order Management component). Affects versions 17.0-26.7. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle Siebel CRM Siebel Apps - Life Sciences product (eDetailing component). Affects versions 17.0-26.7. Easily exploitable, no authentication required, requires network access via HTTP and user interaction. Attacks may lead to unauthorized creation, deletion, modification, or access to data.

Vulnerability in Oracle E-Business Suite Oracle Proposals product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to unauthorized access to critical data.

Vulnerability in Oracle E-Business Suite Oracle Field Service product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to unauthorized access to critical data.

Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to takeover of Oracle Spares Management.

Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may lead to takeover of Oracle Spares Management.

Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may lead to takeover of Oracle Spares Management.

Vulnerability in Oracle E-Business Suite Oracle iStore product (Shopping Cart component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.