CVE Vulnerability Catalog

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable local attack allows an unauthenticated attacker with logon to the infrastructure to take over the product.

Vulnerability in Oracle Outside In Technology (Outside In Clean Content SDK component) version 8.5.8. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the product, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data, with potential impact on other products.

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) affecting version 8.5.8. An easily exploitable attack by an unauthenticated attacker with network access via HTTP can result in a partial denial of service.

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) affecting version 8.5.8. An easily exploitable attack by a low-privileged attacker with logon to the infrastructure can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Solaris (component Utility) versions 11.3 and 11.4. An easily exploitable local attack allows an unauthenticated attacker with logon to the infrastructure to take over the system.

Vulnerability in Oracle E-Business Suite iSupport (component Service Requests) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP network access by a low-privileged attacker allows unauthorized creation, deletion, or modification of data and partial DoS, with potential impact on other products.

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. Successful attacks may result in unauthorized access to critical data and modification, and may impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DoS) of the application. This requires only sending a specially crafted HTTP request.

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DoS) of the application. This requires only sending a specially crafted HTTP request.

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can unauthorized create, delete, or modify critical data. The vulnerability may also impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. This may result in unauthorized creation, deletion, or modification of critical data and unauthorized read access to a subset of data, and may impact additional products (scope change).

Vulnerability in Oracle Outside In Technology (Outside In Clean Content SDK component) version 8.5.8. An unauthenticated attacker with HTTP network access can perform unauthorized creation, deletion or modification of critical data and cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Outside In Technology (component: Outside In Clean Content SDK) version 8.5.8. A low-privileged attacker with network access via HTTP can take over Oracle Outside In Technology. This requires only basic privileges in the system.

Vulnerability in iSupport (component Service Requests) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.

Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can unauthorized create, delete, or modify critical data and gain unauthorized read access to a subset of iSupport data.

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTPS can unauthorized create, delete, or modify critical data and gain unauthorized access to critical data and complete access to all iProcurement data. The vulnerability is difficult to exploit.

Vulnerability in the Utility component of Oracle Solaris 11.4. A low-privileged attacker with logon access can create, delete, or modify critical data, and attacks may significantly impact additional products.