Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX.…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise…
Opis źródłowy NVD · ENCVSS 3,0 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where JD…
Opis źródłowy NVD · ENCVSS 3,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of…
Opis źródłowy NVD · ENCVSS 2,9 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to…
Opis źródłowy NVD · ENCVSS 2,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to…
Opis źródłowy NVD · ENCVSS 2,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools…
Opis źródłowy NVD · ENCVSS 2,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 2,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · ENCVSS 2,7 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS.…
Opis źródłowy NVD · ENCVSS 2,7 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
CVSS
2,7
EPSS
0,3 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle JavaFX.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,0 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where JD…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,0 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,9 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Apps - Marketing executes to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,7 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,7 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
2,7
0,3 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.