CVE Vulnerability Catalog

MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 have a vulnerability in the GIS component allowing a low-privileged attacker to remotely cause a hang or frequent crash (full DoS).

PeopleSoft Enterprise CS Campus Community version 9.2.38 has a vulnerability in the Security component. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and partially modify data.

Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).

Vulnerability in Oracle GoldenGate (component: Libraries) in versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.2. A low-privileged attacker with local access can gain unauthorized read and write access to some data.

Vulnerability in Oracle Performance Management (component: Appraisals) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read and modify access to data.

In MySQL Connectors (component Connector/J) versions 9.7.0-9.7.1, an easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise data confidentiality. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data or complete access to all MySQL Connectors data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle GoldenGate (component: Libraries). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. High privileged attacker with logon and human interaction can gain full data access, modify data, or cause DOS.

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Cash Management component). An unauthenticated attacker via HTTP can cause partial DOS.

In PeopleSoft Enterprise FIN General Ledger Argentina (version 9.1), there is a difficult-to-exploit vulnerability. A low-privileged attacker with network access via HTTP can unauthorizedly create, delete, or modify critical data and cause a partial denial of service.

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Secure Enterprise Search. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in PeopleSoft Enterprise FIN eSettlements (version 9.2). Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.

Vulnerability in PeopleSoft Enterprise FIN Grants (version 9.2). Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.

In Oracle Solaris (component Filesystems) version 11.4, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).

Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

In Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is a difficult-to-exploit vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized access to all system data.

Vulnerability in the Internal Operations component of Oracle Production Scheduling (Oracle E-Business Suite). A high-privileged attacker via HTTP can perform unauthorized creation, deletion, modification of critical data and read access, potentially affecting other products.

Vulnerability in Oracle Production Scheduling of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can perform unauthorized update, insert, or delete, gain unauthorized read access, and cause a partial denial of service (partial DOS).