CVE Vulnerability Catalog

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of data.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affecting versions 8.61-8.63. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data and cause a partial denial of service.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Fluid Core) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can exploit a vulnerability requiring human interaction, causing unauthorized modification and read access to a subset of data and impacting additional products.

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affecting versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or all accessible data, and the attack may impact additional products.

Vulnerability in Oracle Secure Backup (Backup and Restore component) affecting versions 19.1.0.0.0 and 19.1.0.1.0. An unauthenticated attacker with network access via TCP can easily compromise the system. CVSS 9.8.

Vulnerability in Oracle Secure Backup (component: Device Management and Support) affecting versions 19.1.0.0.0 and 19.1.0.1.0. A low-privileged attacker with logon to the infrastructure where the component executes can cause a hang or frequently repeatable crash (complete denial of service), and the attack may impact additional products.

Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup.

Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup and impact additional products (scope change).

Vulnerability in Oracle Secure Backup (component: NDMP daemon). An unauthenticated attacker with network access via TCP can easily exploit this vulnerability, resulting in unauthorized read access to a subset of Oracle Secure Backup accessible data.

Vulnerability in Oracle Secure Backup (Backup and Restore component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable TCP network attack by an unauthenticated attacker can cause a hang or frequently repeatable crash (complete DoS) of Oracle Secure Backup.

Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.

Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, but successful attacks require human interaction. This can result in unauthorized update, insert or delete access to some Siebel Apps - Marketing accessible data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). A low privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Primavera Unifier accessible data.

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). A low privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).

Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) version 6.2.4. A difficult-to-exploit HTTP attack by an unauthenticated attacker can lead to takeover of the component.

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Oracle Product Lifecycle Analytics accessible data.

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all data and unauthorized ability to cause a partial denial of service (partial DOS).