CVE Vulnerability Catalog

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). A high privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) version 3.6.1. A difficult-to-exploit SQL attack by a low-privileged attacker can lead to takeover of Oracle Product Lifecycle Analytics.

Vulnerability in Oracle Siebel CRM Deployment (component: Cloud Gateway). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM End User (component: Portal Framework). An unauthenticated attacker with network access via HTTPS can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in Oracle EDI Gateway (component: All Miscellaneous EDI Issues) of Oracle E-Business Suite. A high-privileged attacker with network access via HTTP can take over Oracle EDI Gateway.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can exploit this difficult-to-exploit vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure can create, delete or modify critical data and gain unauthorized access to it.

Vulnerability in Oracle Siebel CRM End User (component: UIF Open UI). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM End User.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). A low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can create, delete or modify critical data, gain unauthorized access to it, and cause a partial denial of service.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete some data.

Vulnerability in Oracle Siebel Apps - Life Sciences (component: eDetailing). A low-privileged attacker with network access via SQL can take over Siebel Apps - Life Sciences.

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). A high privileged attacker with logon to the infrastructure where Siebel CRM Development executes can easily exploit this vulnerability, resulting in unauthorized creation, deletion or modification access to critical data or all data as well as unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Siebel CRM Development (component: Integration - Scripting) affecting versions 17.0-26.9. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and complete access to all accessible data.

Vulnerability in Oracle Siebel CRM Development (component: Configuration Tools) affecting versions 17.0-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized create, delete or modify access to critical data and unauthorized read access to a subset of data.

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.

Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay) affects versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure can compromise the framework.

Vulnerability in Oracle Siebel CRM (component: Web UI) affects versions 17.0-26.9. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.