CVE Vulnerability Catalog

Vulnerability in the Utility component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can exploit it to cause unauthorized data modification and partial denial of service.

Vulnerability in the Networking component of Oracle Java SE and Oracle GraalVM for JDK. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to gain unauthorized access to critical data or all Java-accessible data.

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data, but requires user interaction.

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data without user interaction.

Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, with user interaction, to perform unauthorized modification and read access to some data, potentially impacting additional products.

Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can perform unauthorized modification and read access to some data.

Vulnerability in the E1 IOT Orchestrator Security component of JD Edwards EnterpriseOne Orchestrator (versions 9.2.0.0-9.2.26.5). A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and to create, delete, or modify it.

Vulnerability in the JavaFX component of Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can, with user interaction, perform unauthorized modification and read access to some data. The flaw affects clients running untrusted code in a sandbox.

Vulnerability in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with JDENET network access can gain unauthorized access to critical data or all data accessible in the product.

Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to compromise the product, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: 2D) affecting versions such as 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1 and 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to impact data integrity and cause partial denial of service.

Vulnerability in Oracle Java SE and Oracle GraalVM Enterprise Edition (2D component) affecting versions 8u503, 8u503-perf, and 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated network attacker to modify, insert, or delete some data; also applies to sandboxed Java Web Start/applet deployments.

Vulnerability in the Utility component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This difficult-to-exploit flaw allows an unauthenticated attacker with logon access to the infrastructure to gain unauthorized update, insert, or delete access and unauthorized read access to a subset of data. It can be exploited through APIs in the component, e.g., via a web service supplying data, and also affects Java deployments running untrusted code in a sandbox.

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: JDK tools) affecting versions such as 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1 and 27. A difficult-to-exploit flaw requires logon to the infrastructure and human interaction and can lead to unauthorized data modification.

Vulnerability in Oracle Siebel CRM Integration (component: Open Integration) affecting versions 25.12-26.9. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the product, requires human interaction, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Siebel CRM Integration (component Open Integration) versions 25.12-26.9. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data.

Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (component: Web Access) affecting versions 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the product, requires human interaction, and attacks may significantly impact additional products (scope change).