CVE Vulnerability Catalog

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle Virtual Directory. Affected versions are 11.1.1.7.0 and 11.1.1.9.0.

Vulnerability in the PT PeopleTools component of Oracle PeopleSoft Enterprise allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.54, 8.55, and 8.56.

Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows low privileged attackers to access critical data. Versions 8.54, 8.55, and 8.56 are susceptible to easily exploitable attacks via HTTP.

Vulnerability in the Oracle FLEXCUBE Universal Banking component allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle FLEXCUBE Universal Banking.

A vulnerability in the PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge) allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Attacks may significantly impact additional products, leading to unauthorized access to data and partial denial of service.

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI) allows easy exploitation by a low privileged attacker with network access via HTTP. This can lead to unauthorized access to critical data and complete access to all Oracle Hospitality Hotel Mobile accessible data.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. The attacker can cause hangs or frequent crashes of the server and gain unauthorized access to data.

A vulnerability in the Java SE and Java SE Embedded components allows easy exploitation by an unauthenticated attacker with network access. It requires human interaction, which may lead to the takeover of Java SE or Java SE Embedded.

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal) allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.

Vulnerability in the PeopleTools component of Oracle PeopleSoft allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data in PeopleSoft Enterprise PT PeopleTools.

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) affects versions 16.0 and 17.0. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to unauthorized access to data and partial denial of service.

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in Oracle Universal Work Queue.

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server) allows unauthenticated attackers with network access via HTTP to compromise the applications. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can create, delete, or modify critical data within the system.

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.

Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires human interaction from a person other than the attacker, which increases the risk of significant consequences for other products.

A vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires user interaction, which may lead to unauthorized access to critical data.

Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.