CVE Vulnerability Catalog

Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit network attack requiring high privileges can cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle Utilities Network Management System (System Wide component) affects versions 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized read access to a subset of data.

Vulnerability in Oracle GoldenGate (Vendor Access Module component) affects versions 21.3-21.23. An easily exploitable local attack by a low-privileged user with logon to the infrastructure can result in unauthorized access to critical data or complete access to all GoldenGate data.

Vulnerability in Oracle ZFS Storage Appliance Kit (Core component) affects version 8.8. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized read access to a subset of data.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Supply Chain Relationship Mgmt component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user can result in unauthorized read access to a subset of data.

Vulnerability in Oracle Utilities Network Management System (component System Wide) affecting versions 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. Allows unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of system data.

Vulnerability in Helidon (component WebSocket) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in Helidon (component helidon-webclient-http1) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to cause a partial denial of service (partial DoS) of Helidon.

Vulnerability in Helidon (component helidon-webclient) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in Helidon (component helidon-webclient-websocket) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data and cause a partial denial of service (partial DoS).

Vulnerability in Helidon (component helidon-integrations-vault) affecting versions 4.0.0-4.5.5. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data; attacks may significantly impact additional products (scope change).

Vulnerability in Helidon (component helidon-webclient-dns-resolver-round-robin) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via DNS to gain unauthorized update, insert or delete access to some Helidon data and cause a partial denial of service (partial DoS).

Vulnerability in Helidon (component helidon-security-providers-jwt) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data; attacks may significantly impact additional products (scope change).

Vulnerability in Helidon (component helidon-security-providers-google-login) affecting versions 4.0.0-4.5.5. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in Helidon (component LRA) affecting versions 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to gain unauthorized update, insert or delete access to some Helidon data, unauthorized read access to a subset of Helidon data, and cause a partial denial of service (partial DoS); attacks may significantly impact additional products (scope change).