CVE Vulnerability Catalog

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to take over the MySQL server.

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to modify critical data and cause a hang or repeatable crash (DoS).

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the communication segment to cause a hang or repeatable crash (DoS) and modify some data.

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

Vulnerability in MySQL Cluster (component Cluster: General) affecting versions 26.7.0-26.7.1. A difficult-to-exploit network attack via TCP allows an unauthenticated attacker to cause a hang or repeatable crash (complete DoS) and unauthorized read and modification of some data.

Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle Application Object Library (component DB Privileges) affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged user with logon to the infrastructure allows takeover of Oracle Application Object Library.

Vulnerability in Oracle Agile Engineering Data Management (component Install) affecting version 6.2.1. An easily exploitable attack by an unauthenticated attacker with access to the physical communication segment requires user interaction and can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit network attack via HTTP by a low-privileged user can lead to unauthorized modification and access to critical data and partial DoS, with potential impact on other products.

Vulnerability in Oracle Applications Manager (component Diagnostics) affecting versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP by a low-privileged user allows takeover of Oracle Applications Manager.

Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit attack by a low-privileged user with logon to the infrastructure allows takeover of the system.

Vulnerability in Primavera Unifier (component Core) affecting versions 21.12.0-21.12.17. A difficult-to-exploit network attack via HTTP by an unauthenticated attacker can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Affected versions are 23.12.0-23.12.16. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and read a subset of accessible data.

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The affected version is 9.3.6. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Agile PLM, requiring human interaction.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.