CVE Vulnerability Catalog

Vulnerability in Oracle Solaris (version 11.4) allows a low-privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle SOA Suite (Fabric Layer component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with network access via HTTPS can, under difficult conditions, perform unauthorized update, insert or delete operations and cause partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allows a low-privileged attacker with network access via HTTP to take over the application. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (DoS) and unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts).

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Applications Manager.

Vulnerability in Oracle GoldenGate (Admin Client Executable component) affecting versions 23.4–23.26.2.0.0. A high-privileged attacker with network access via HTTP can, under difficult conditions, gain unauthorized access to critical data or all data accessible in Oracle GoldenGate.

Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting version 12.2.1.4.0. A low-privileged attacker with network access via HTTPS can easily gain unauthorized read access to a subset of data accessible in Oracle BI Publisher.

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core), affecting version 8.8. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle ZFS Storage Appliance Kit.

Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions requiring user interaction, perform unauthorized modification or read of data, with possible impact on additional products.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Foundation component) affecting version 12.2.1.4.0. A low-privileged attacker with network access via HTTP can easily cause a partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can, with user interaction, perform unauthorized modification or read of data, with possible impact on additional products.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the application.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the application.

Vulnerability in PeopleSoft Enterprise PeopleTools (Report Distribution component) affecting versions 8.61–8.63. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in PeopleTools.

Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can easily perform unauthorized update, insert or delete of data and read a subset of data.

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin), affecting versions 13.4.1.0.1-13.5.2.0.6. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to take over the product, requiring human interaction.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over the application.

Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in Oracle BI Publisher.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management), affecting version 6.2.4. An easily exploitable flaw allows a high-privileged attacker with HTTP network access to take over the application.

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data and modify it, potentially impacting other products (scope change).