CVE Vulnerability Catalog

Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial DOS.

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user can result in unauthorized read access to a subset of data.

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security) affecting versions 4.0.0-4.5.5. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.

Vulnerability in Oracle Utilities Network Management System (component System Wide) affecting versions 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. Allows unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of system data.

Vulnerability in Helidon (component WebSocket) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in Helidon (component helidon-webclient-http1) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to cause a partial denial of service (partial DoS) of Helidon.

Vulnerability in Helidon (component helidon-webclient) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in Oracle Helidon (component helidon-cors) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized modification and read access to data and impact on other products.

Vulnerability in Helidon (component helidon-webclient-websocket) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data and cause a partial denial of service (partial DoS).

Vulnerability in Oracle Helidon (component helidon-common-mapper) versions 4.0.0-4.5.5 and 27.0.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of data, partial read access, and partial DOS.

Vulnerability in Helidon (component helidon-integrations-vault) affecting versions 4.0.0-4.5.5. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data; attacks may significantly impact additional products (scope change).

Vulnerability in Helidon (component helidon-webclient-dns-resolver-round-robin) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via DNS to gain unauthorized update, insert or delete access to some Helidon data and cause a partial denial of service (partial DoS).

Vulnerability in Helidon (component helidon-security-providers-jwt) affecting versions 4.0.0-4.5.5 and 27.0.0. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data; attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Helidon (component helidon-grpc-server) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to unauthorized modification and read access to data and impact on other products.

Vulnerability in Helidon (component helidon-security-providers-google-login) affecting versions 4.0.0-4.5.5. Allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon data.

Vulnerability in the Helidon product (component: helidon-cors) affecting versions 4.0.0-4.5.5. A difficult to exploit vulnerability requires human interaction and allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.

Vulnerability in the Helidon product (component: LRA) affecting versions 4.0.0-4.5.5. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data.

Vulnerability in Helidon (component LRA) affecting versions 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to gain unauthorized update, insert or delete access to some Helidon data, unauthorized read access to a subset of Helidon data, and cause a partial denial of service (partial DoS); attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Fusion Middleware's Helidon product (component: OIDC) affecting versions 4.0.0-4.5.5 and 27.0.0. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to access critical data and modify some Helidon data, requiring user interaction and potentially impacting additional products.