CVE Vulnerability Catalog

Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer), affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to take over Workflow.

Vulnerability in PeopleSoft Enterprise PeopleTools (Porting component) affecting versions 8.61 and 8.62. A high-privileged attacker with logon to the infrastructure hosting PeopleTools can easily perform unauthorized creation, deletion or modification of data and access critical data.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Oracle WebCenter Content.

Vulnerability in the VPD component of Oracle Database Server. A low privileged attacker with Create Table privilege can exploit it over the network via Oracle Net to gain unauthorized creation, deletion or modification access to VPD data. CVSS 8.1.

Vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TLS to perform unauthorized update, insert or delete access to some data, read a subset of data, and cause a partial denial of service. CVSS 7.3.

Vulnerability in the Installer component of Oracle Identity Manager (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to gain unauthorized access to critical data or all data accessible in Oracle Identity Manager.

Vulnerability in the RDBMS component of Oracle Database Server. A low privileged attacker with DBMS_VECTOR privilege can exploit it over the network via Oracle Net to take over RDBMS. CVSS 8.8.

Vulnerability in the Updates Environment Mgmt component of PeopleSoft Enterprise PeopleTools (Oracle PeopleSoft) affecting versions 8.61-8.63. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some PeopleTools accessible data.

Vulnerability in the Workflow Notification Mailer component of Oracle E-Business Suite Workflow. A low privileged attacker can exploit it over the network via HTTP to take over Workflow; exploitation is difficult. CVSS 7.5.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can take over Oracle WebCenter Content. CVSS 9.8.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TCP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult. CVSS 7.4.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via LDAP to gain unauthorized access to critical connector data. CVSS 7.5.

Vulnerability in the SAP ERP+ component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via HTTP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult and impact may extend beyond the connector (scope change). CVSS 8.7.

Vulnerability in Oracle Identity Manager Connector (LDAP Gateway component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can take over Oracle Identity Manager Connector. CVSS 9.8.

Vulnerability in Oracle Identity Manager Connector (LDAP Gateway component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.1.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.

Vulnerability in the Generic REST component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.

Vulnerability in the Compiler component of Oracle Java SE (versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert, or delete operations on some data and unauthorized read access to a subset of data; exploitation requires supplying data to the component's APIs without using untrusted Java Web Start applications or applets.

Vulnerability in the General Ledger component of PeopleSoft Enterprise FIN General Ledger Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to perform unauthorized update, insert, or delete operations on some data and cause a partial denial of service (partial DOS).

Vulnerability in Oracle PeopleSoft Enterprise FIN Cash Management (component: Cash Management) version 9.2. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service, requiring user interaction.