CVE Vulnerability Catalog

Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data. CVSS 3.1 Base Score 5.3 (Integrity impacts).

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The affected version is 9.3.6. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Agile PLM, requiring human interaction.

Vulnerability in Oracle Agile PLM (Application Server component) affecting version 9.3.6. An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or all data and perform unauthorized update, insert or delete access to some data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Agile PLM (Security component) affecting version 9.3.6. A low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes can gain unauthorized access to critical data or all data and perform unauthorized update, insert or delete access to some data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Agile PLM (Web Client component) affecting version 9.3.6. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).

Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. A difficult-to-exploit attack via HTTP by an unauthenticated attacker can lead to unauthorized access to critical data and modification.

Vulnerability in Oracle Agile PLM (Web Client component) version 9.3.6. An easily exploitable attack via HTTP by an unauthenticated attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in Oracle Payroll (Payroll component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a high-privileged attacker can lead to takeover of Oracle Payroll.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a low-privileged attacker can lead to unauthorized creation, deletion, or modification of critical data and access to it.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data.

Vulnerability in Oracle One-to-One Fulfillment (Documents component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker can lead to unauthorized access to critical data or all accessible data.

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a high privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data, with potential impact on additional products.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Affected versions are 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Oracle Concurrent Processing, with potential impact on additional products.

Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Pasta.

Vulnerability in Oracle Concurrent Processing (Request Submission and Scheduling component) versions 12.2.3-12.2.15. An easily exploitable attack by a high-privileged attacker with local logon may impact additional products (scope change) and lead to unauthorized access to critical data.

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Application Object Library.