CVE Vulnerability Catalog

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, an unauthenticated attacker with HTTP network access can take over PeopleTools.

Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, causing a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Portal component, affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data and partial denial of service (partial DOS).

Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized creation, deletion, or modification access to critical data or all Oracle REST Data Services accessible data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, which may significantly impact additional products (scope change), resulting in unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability requiring human interaction, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the ADP component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.

Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access to data accessible through the service.

Vulnerability in Oracle REST Data Services (Database Actions component), affected versions 24.2.0-26.1.0. An easily exploitable flaw allows a high-privileged attacker with HTTP network access to cause a partial denial of service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A high-privileged attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.

Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions, cause unauthorized creation, deletion, or modification of critical data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. An easily exploitable flaw allows a high-privileged attacker with HTTP network access, requiring user interaction, to update, insert or delete some data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to read a subset of service data.

Vulnerability in Oracle REST Data Services (Core component), affected versions 24.2.0-26.1.0. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access, requiring user interaction, to update, insert or delete some data and read a subset of data.