CVE Vulnerability Catalog

Vulnerability in Oracle HRMS (UK) of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.

Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Sourcing.

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via Oracle Net to modify or delete critical data and gain unauthorized access to it.

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to modify or delete critical data and gain unauthorized access to it.

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise the product.

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to modify or delete critical data and gain unauthorized access to it.

Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite, component Korean Payroll. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite, component Indian Payroll. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite, component Product Diagnostic Tools. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

A vulnerability in IBM Guardium Data Protection 12.1 and 12.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic key.

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.

Vulnerability in the RDBMS component of Oracle Database Server versions 19.3-19.32 and 21.3-21.23. An easily exploitable flaw allows a high privileged attacker with Query Optimizer privilege and network access via Oracle Net to gain unauthorized read access to a subset of data.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Integration Broker. Affects versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction and potentially impacting other products.

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise the system.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Updates Environment Mgmt. Affects versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to compromise the system.

Vulnerability in the Open Query component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. A difficult to exploit flaw allows a high privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data.

Vulnerability in the Data Mover component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows a high privileged attacker with logon to the infrastructure to perform unauthorized data modification, read a subset of data, and cause partial denial of service, requiring user interaction.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Push Notifications. Affects versions 8.61 and 8.62. An easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment to compromise the system.