CVE Vulnerability Catalog

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can, with user interaction, gain unauthorized update, insert or delete access to data and cause a partial DoS.

Vulnerability in JD Edwards EnterpriseOne Configurator (Configuration Management component) affecting version 9.2. A low-privileged attacker with HTTP network access can, under difficult conditions, gain unauthorized creation, deletion or modification of critical data.

Vulnerability in JD Edwards EnterpriseOne Homebuilder (Homebuilder Management component) affecting version 9.2. A low-privileged attacker with JDENET network access can gain unauthorized creation, deletion or modification of critical data.

Vulnerability in JD Edwards EnterpriseOne General Ledger (E1 Foundation component) affecting version 9.2. A low-privileged attacker with JDENET network access can, under difficult conditions, cause a hang or frequently repeatable crash (complete DoS) of the product.

Vulnerability in JD Edwards EnterpriseOne Human Resources Management (Human Resources component) affecting version 9.2. An unauthenticated attacker with JDENET network access can, under difficult conditions, gain unauthorized update, insert or delete access to data and read access to a subset of data.

Vulnerability in the Human Resources component of Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2. A low-privileged attacker with network access via JDENET can perform unauthorized updates, inserts or deletes and cause a partial denial of service.

Vulnerability in the Package Build SEC component of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0-9.2.26.5. A high-privileged attacker with local logon to the infrastructure can take over JD Edwards EnterpriseOne Tools.

Vulnerability in the Operational Sourcing component of Oracle JD Edwards EnterpriseOne Operational Sourcing version 9.2. A low-privileged attacker with network access via SMTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in the Business Logic Infra SEC component of Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can update, insert or delete data and gain unauthorized read access to a subset of data.

Vulnerability in the Sales Order Entry component of Oracle JD Edwards EnterpriseOne Sales Order Entry version 9.2. A low-privileged attacker with network access via JDENET can gain unauthorized access to critical data or all accessible data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can gain unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via SOAP can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to update, insert or delete it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker able to log on to the infrastructure hosting WebCenter Content can easily exploit the flaw to gain unauthorized access to critical data; the attack may impact additional products (scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with access to the physical communication segment attached to the hardware running WebCenter Content can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with HTTP network access can, with difficulty and requiring user interaction, exploit the flaw; the attack may impact additional products (scope change) and result in unauthorized access to critical data and its update, insert or delete.