CVE Vulnerability Catalog

Vulnerability in Oracle HRMS (US) (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, a low-privileged attacker via HTTP can gain unauthorized read access and cause partial denial of service.

Vulnerability in Oracle HRMS (UK) of Oracle E-Business Suite (component: Internal Operations) versions 12.2.8-12.2.15. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly access critical data, potentially affecting other products.

Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Order Management data.

Vulnerability in Oracle Application Object Library (Core component) versions 12.2.3-12.2.15. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Application Object Library data. The attack may impact other products.

Vulnerability in the JSON component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS) of the server.

MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 have a vulnerability in the GIS component allowing a low-privileged attacker to remotely cause a hang or frequent crash (full DoS).

PeopleSoft Enterprise CS Campus Community version 9.2.38 has a vulnerability in the Security component. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and partially modify data.

Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).

Vulnerability in Oracle GoldenGate (component: Libraries) in versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.2. A low-privileged attacker with local access can gain unauthorized read and write access to some data.

Vulnerability in Oracle Performance Management (component: Appraisals) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read and modify access to data.

In MySQL Connectors (component Connector/J) versions 9.7.0-9.7.1, an easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise data confidentiality. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data or complete access to all MySQL Connectors data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle GoldenGate (component: Libraries). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. High privileged attacker with logon and human interaction can gain full data access, modify data, or cause DOS.

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Cash Management component). An unauthenticated attacker via HTTP can cause partial DOS.

In PeopleSoft Enterprise FIN General Ledger Argentina (version 9.1), there is a difficult-to-exploit vulnerability. A low-privileged attacker with network access via HTTP can unauthorizedly create, delete, or modify critical data and cause a partial denial of service.

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Secure Enterprise Search. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in PeopleSoft Enterprise FIN eSettlements (version 9.2). Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.

Vulnerability in PeopleSoft Enterprise FIN Grants (version 9.2). Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.