Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier.…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM End User. Successful…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise iProcurement. Successful…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthenticated attackers invoke them remotely. Attackers can call /debug/populatedb to delete all groups, tags and tickets, then log in with seeded accounts using the…
Opis źródłowy NVD · ENCVSS 7,4 · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buffer near linear memory's end, writing…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affects unknown code of the file /Agent/includes/UpdatePolicyHolder-inc.php of the component Policy Holder Update Form. The…
Opis źródłowy NVD · ENCVSS 7,3 · rekomendacja wg zapisanej polityki
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqli_query of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a…
Opis źródłowy NVD · ENCVSS 7,3 · rekomendacja wg zapisanej polityki
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqli_query of the file /Admin/View/editPlan.php. Such manipulation of the argument Plan_no/Name leads to sql…
Opis źródłowy NVD · ENCVSS 7,3 · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Mobile Field…
Opis źródłowy NVD · ENCVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI…
Opis źródłowy NVD · ENCVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI…
Opis źródłowy NVD · ENCVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
CVSS
7,2
EPSS
0,5 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attacks of this…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM End User. Successful…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise iProcurement. Successful…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthenticated attackers invoke them remotely. Attackers can call /debug/populatedb to delete all groups, tags and tickets, then log in with seeded accounts using the…
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buffer near linear memory's end, writing…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affects unknown code of the file /Agent/includes/UpdatePolicyHolder-inc.php of the component Policy Holder Update Form. The…
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqli_query of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a…
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqli_query of the file /Admin/View/editPlan.php. Such manipulation of the argument Plan_no/Name leads to sql…
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Mobile Field…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,2 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
7,2
0,5 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.