Oracle REST Data Services vulnerabilities

Vulnerability in Oracle REST Data Services (Core component) versions 24.2.0-26.2.2. An easily exploitable HTTP attack by a low-privileged attacker can result in unauthorized access to critical data or all data accessible through Oracle REST Data Services.

Vulnerability in Oracle REST Data Services (component: Core) affecting versions 24.2.0-26.2.1. A low-privileged attacker with network access via HTTP can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access to data accessible through the service.

Vulnerability in Oracle REST Data Services (Database Actions component), affected versions 24.2.0-26.1.0. An easily exploitable flaw allows a high-privileged attacker with HTTP network access to cause a partial denial of service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A high-privileged attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions, cause unauthorized creation, deletion, or modification of critical data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. An easily exploitable flaw allows a high-privileged attacker with HTTP network access, requiring user interaction, to update, insert or delete some data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to read a subset of service data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access, requiring user interaction, to update, insert or delete some data and read a subset of data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, requiring user interaction, to read a subset of service data.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access to data accessible through the service.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.

Critical vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTPS can compromise the service, potentially impacting other products (scope change).

A critical vulnerability in Oracle REST Data Services (versions 24.2.0-26.1.0) allows a low-privileged attacker with network access via HTTPS to take over the service. The attack may impact additional products (scope change).

A critical vulnerability in Oracle REST Data Services (versions 24.2.0-26.1.0) allows a low-privileged attacker with network access via HTTPS to take over the service. The attack may impact additional products (scope change).

Vulnerability in Oracle REST Data Services (General component) affecting versions 24.2.0-26.2.2. An easily exploitable HTTP attack allows a low-privileged attacker to take over Oracle REST Data Services.

Vulnerability in Oracle REST Data Services (Graph QL component) affects versions 24.2.0-26.2.1. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized creation, deletion, or modification access to critical data or all Oracle REST Data Services accessible data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, which may significantly impact additional products (scope change), resulting in unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability requiring human interaction, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the ADP component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.

A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A high-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations, gain unauthorized read access to a subset of data, and cause a partial denial of service.

A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access, requiring user interaction, can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data, potentially impacting additional products.

A vulnerability in Oracle REST Data Services (Graph QL component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data accessible through Oracle REST Data Services.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with HTTP network access, requiring user interaction, to create, delete or modify critical data and read a subset of data, potentially impacting additional products.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update, insert or delete operations and read a subset of data.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can perform unauthorized update, insert or delete operations on data accessible through Oracle REST Data Services.

Vulnerability in Oracle REST Data Services (component: Core) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTPS can easily exploit this flaw, causing a partial denial of service (partial DOS).

Vulnerability in Oracle REST Data Services (Core component) versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTPS can unauthorizedly update, insert, or delete data.

Vulnerability in Oracle REST Data Services (component: General) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTPS can easily exploit this flaw, resulting in unauthorized read access to a subset of data.

Vulnerability in Oracle REST Data Services in the Mongoapi component. An unauthenticated attacker with network access via HTTPS can gain unauthorized read access to a subset of data. Affected versions are 24.2.0-26.1.0.

Vulnerability in Oracle REST Data Services in the Mongoapi component. An unauthenticated attacker with network access via HTTPS can cause a complete denial of service (DOS).