CVE Vulnerability Catalog

Vulnerability in Oracle Contract Lifecycle Management for Public Sector (Wage Determination Online component) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized update/insert/delete and read access to data. The attack may impact additional products (scope change).

Vulnerability in Oracle iRecruitment (Internal Operations component) versions 12.2.3-12.2.15. An unauthenticated attacker with physical access to the communication segment can gain unauthorized access to critical data and modify or delete it.

Vulnerability in Helidon (helidon-microprofile-security component) versions 4.0.0-4.5.4. A low-privileged attacker with network access via HTTP can gain unauthorized update/insert/delete and read access to data.

Vulnerability in Helidon (WebSocket component) versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS).

Vulnerability in Oracle Fusion Middleware Helidon product (component: LRA) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can compromise Helidon, leading to unauthorized update, insert, delete, and read access to some Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon product (component: helidon-media-multipart) affects versions 3.0.0-3.2.20. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Helidon.

Vulnerability in Oracle Fusion Middleware Helidon product (component: JSON) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Helidon.

Vulnerability in Oracle E-Business Suite Oracle Assets product (component: Internal Operations) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Assets accessible data.

Vulnerability in Oracle E-Business Suite Oracle Product Hub product (component: Internal Operations) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle E-Business Suite Oracle Depot Repair product (component: Depot Repair Diagnostics) affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle E-Business Suite Oracle Product Workbench product (component: WebUI) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP and user interaction can gain unauthorized update, insert, delete, and read access to some data, and attacks may impact additional products.

Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy (component: SEPP) affects versions 26.1.200 and 25.2.201. A low privileged attacker with network access via HTTP can gain unauthorized update, insert, delete, and read access to some data.

Vulnerability in Oracle Fusion Middleware Oracle Coherence product (component: Core) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low privileged attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Oracle Coherence.

Vulnerability in Oracle Fusion Middleware Oracle Coherence product (component: Core) affects version 15.1.1.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Coherence accessible data, and attacks may impact additional products.

Vulnerability in the Oracle Net Services component of Oracle Database Server, affecting versions 23.4.0-23.26.3. An unauthenticated attacker with network access via TCPS can exploit it, but human interaction is required. Successful attacks can cause a hang or frequently repeatable crash (complete DoS) of Oracle Net Services.

Vulnerability in the Oracle Fusion Middleware Control product (component: Framework), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can exploit it, requiring human interaction, and attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in the Helidon product (component: helidon-integrations-neo4j), affecting versions 3.0.0-3.2.20 and 4.0.0-4.5.4. A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to data.

Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product (component: Forge), affecting version 11.4.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TLS to cause a hang or frequently repeatable crash (complete DoS) and unauthorized read access to a subset of data.