CVE Vulnerability Catalog

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. Successful attacks may result in unauthorized access to critical data and modification, and may impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DoS) of the application. This requires only sending a specially crafted HTTP request.

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DoS) of the application. This requires only sending a specially crafted HTTP request.

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can unauthorized create, delete, or modify critical data. The vulnerability may also impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. This may result in unauthorized creation, deletion, or modification of critical data and unauthorized read access to a subset of data, and may impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. A low-privileged attacker with network access via HTTP can take over Oracle Outside In Technology. This requires only basic privileges in the system.

Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can unauthorized create, delete, or modify critical data and gain unauthorized read access to a subset of iSupport data.

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTPS can unauthorized create, delete, or modify critical data and gain unauthorized access to critical data and complete access to all iProcurement data. The vulnerability is difficult to exploit.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can take over the product, but human interaction is required.

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment attached to the hardware where JD Edwards EnterpriseOne Tools executes can take over the product. The vulnerability is difficult to exploit.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.4. An unauthenticated attacker with access to the physical communication segment can exploit it, requiring user interaction; attacks may impact additional products (scope change) and lead to takeover of JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized access to critical data or complete access to all data accessible in JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle E-Business Suite iProcurement (component: Requisition Management) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, leading to takeover of iProcurement.

Vulnerability in Oracle E-Business Suite iProcurement (component: E-Content Manager Catalog) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTPS can easily exploit it, leading to takeover of iProcurement.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can easily exploit it, requiring user interaction, leading to takeover of the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes can easily exploit it, requiring user interaction, leading to takeover of the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to compromise the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to compromise the system.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to gain unauthorized access to critical data.