CVE Vulnerability Catalog

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle One-to-One Fulfillment.

Vulnerability in Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues) affects versions 12.2.3-12.2.15. A difficult to exploit attack via HTTP by a low privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle One-to-One Fulfillment (Admin Console UI component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in Oracle Application Object Library (Core component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by an unauthenticated attacker requires user interaction and can lead to unauthorized creation, deletion, or modification of critical data and access to it.

Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTPS by a high privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 7.2.

Vulnerability in Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 8.8.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker can result in unauthorized access to critical data and unauthorized update, insert, or delete access. CVSS 3.1 Base Score 8.2.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in unauthorized access to critical data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 7.7.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker can result in unauthorized access to critical data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 8.6.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. A difficult to exploit attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 8.8.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 8.8.

Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in unauthorized creation, deletion, or modification of critical data, unauthorized access to critical data, and partial denial of service. CVSS 3.1 Base Score 8.3.

Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit attack allows a low-privileged attacker with logon to the infrastructure to compromise Applications DBA. CVSS 7.0.

Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable attack allows an unauthenticated attacker with logon to the infrastructure to compromise Applications DBA, requiring user interaction. CVSS 7.8.

Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit attack allows a low-privileged attacker with logon to the infrastructure to compromise Applications DBA. CVSS 7.0.

Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit network attack via TLS allows an unauthenticated attacker to create, delete, or modify critical data and access it. CVSS 7.4.

Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack allows an unauthenticated attacker to cause a hang or repeatable crash (DoS). CVSS 7.5.

Vulnerability in MySQL Connectors (component: Connector/J) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DoS), requiring human interaction from a person other than the attacker.