CVE Vulnerability Catalog

Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle Application Object Library (component DB Privileges) affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged user with logon to the infrastructure allows takeover of Oracle Application Object Library.

Vulnerability in Oracle Agile Engineering Data Management (component Install) affecting version 6.2.1. An easily exploitable attack by an unauthenticated attacker with access to the physical communication segment requires user interaction and can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit network attack via HTTP by a low-privileged user can lead to unauthorized modification and access to critical data and partial DoS, with potential impact on other products.

Vulnerability in Oracle Applications Manager (component Diagnostics) affecting versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP by a low-privileged user allows takeover of Oracle Applications Manager.

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit attack by a low-privileged user with logon to the infrastructure allows takeover of the system.

Vulnerability in Primavera Unifier (component Core) affecting versions 21.12.0-21.12.17. A difficult-to-exploit network attack via HTTP by an unauthenticated attacker can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Affected versions are 23.12.0-23.12.16. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and read a subset of accessible data.

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The affected version is 9.3.6. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Agile PLM, requiring human interaction.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data.

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a high privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data, with potential impact on additional products.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Affected versions are 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Oracle Concurrent Processing, with potential impact on additional products.

Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Pasta.

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Application Object Library.

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle One-to-One Fulfillment.

Vulnerability in Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues) affects versions 12.2.3-12.2.15. A difficult to exploit attack via HTTP by a low privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 7.5.