CVE Vulnerability Catalog

Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.

Vulnerability in the Core RDBMS component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. It allows easy exploitation by a low privileged attacker with Create session privilege, potentially leading to the takeover of Core RDBMS.

A vulnerability in the Oracle Hyperion BI+ component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.

Vulnerability in the Oracle Hyperion Financial Reporting component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized access to critical data or complete access to all data accessible in Oracle Hyperion Financial Reporting.

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) allows an attacker with network access to compromise the system. It requires user interaction, increasing the risk of unauthorized data access and the potential for partial denial of service.

Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, increasing the risk for the organization.

Vulnerability in the Java SE and Java SE Embedded components of Oracle Java SE, related to RMI, allows an unauthenticated attacker with network access to compromise these systems. Attacks require human interaction, which may lead to takeover of Java SE and Java SE Embedded.

A vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory) allows easy exploitation by an unauthenticated attacker with access to the infrastructure where Oracle Identity Manager Connector operates. Attacks can lead to unauthorized access to critical data and may cause system crashes.

Vulnerability in Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite, affecting versions prior to 3.2.6. It allows an unauthenticated attacker with network access via HTTP to compromise ILOM, potentially leading to unauthorized access to data and partial denial of service.

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI) allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker, and while the vulnerability is in the Siebel UI Framework, attacks may significantly impact additional products.

Vulnerability in Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite affecting versions prior to 3.2.6. It allows an unauthenticated attacker with network access via HTTP to compromise ILOM, potentially leading to hangs or frequent crashes (complete DOS).

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks can lead to unauthorized access to critical data.

Vulnerability in the Java VM component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. Easily exploitable by a high privileged attacker, potentially leading to takeover of the Java VM.

Vulnerability in the MySQL Server component of Oracle MySQL allows an unauthenticated attacker with network access to compromise the MySQL Server. Successful attacks can result in the ability to cause a hang or frequently repeatable crash, leading to a complete denial of service (DoS).

Vulnerability in the Oracle Retail Point-of-Service component allows a low privileged attacker with network access via HTTP to compromise the system. Attacks may significantly impact additional products, leading to unauthorized access to critical data.

A vulnerability in the Oracle Business Intelligence Enterprise Edition component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.

A vulnerability in the Oracle Hospitality Suite8 component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack requires interaction from a third party, potentially leading to unauthorized access to critical data.

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks can lead to unauthorized access to critical data.

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction and can lead to unauthorized access to critical data.