tsecurity.de - News Radar & Live Feeds

CVE-2026-91399 | Oracle Primavera P6 Enterprise Project Portfolio Management Web Access improper authorization (EUVD-2026-106653)

Fri, 23 Oct 2026 22:41:26 +0200

A vulnerability was found in Oracle Primavera P6 Enterprise Project Portfolio Management. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Access. Such manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-91399. The attack may be launched... Weiterlesen

Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0

Fri, 23 Oct 2026 20:40:57 +0200

Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite was home to one of the vulnerabiltiies, tracked as CVE-2026-101809. This enables any unauthenticated attacker... Weiterlesen

CVE-2026-91403 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JSSE privileges management (EUVD-2026-107578)

Fri, 23 Oct 2026 14:07:43 +0200

A vulnerability classified as critical has been found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition up to 27.0.1. This issue affects some unknown processing of the component JSSE. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2026-91403. The attack can be initiated remotely. There... Weiterlesen

[NEU] [hoch] Oracle Java SE and GraalVM, und OpenJDK: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Fri, 23 Oct 2026 13:51:33 +0200

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle Java SE, Oracle GraalVM und OpenJDK ausnutzen, um Sicherheitsvorkehrungen zu umgehen und dadurch Daten offenzulegen oder zu verändern. Weiterlesen

Black October Teil 2: Schwachstellen in Fortinet FortiOS, Oracle JAVA, Node2Shell in Node.js

Fri, 23 Oct 2026 13:36:04 +0200

Wird Zeit, dass der Black October zu Ende geht, aber ein paar Häppchen an Sicherheitsproblemen hätte ich noch zum Wochenabschluss. Wer Produkte mit FortiOS von Fortinet einsetzt, muss reagieren. Und Oracle hat gerade ein Java-Update zum Schließen einer kritischen Lücke … Weiterlesen → Quelle Weiterlesen

Oracle Patches Critical Java Security Flaw That Could Allow Hackers to Steal Data

Fri, 23 Oct 2026 09:30:24 +0200

Oracle released emergency Java security updates to address CVE-2026-91403, a critical vulnerability that could expose sensitive information and undermine data integrity. Published on October 21, 2026, the advisory assigns the flaw a CVSS 3.1 score of 9.1 and identifies it as remotely exploitable without authentication. The updates distrust... Weiterlesen

Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks

Fri, 23 Oct 2026 09:30:00 +0200

Oracle issued a security alert for CVE-2026-91403, a critical vulnerability affecting Oracle Java SE and GraalVM. Attackers can exploit this vulnerability remotely without authentication. The advisory, published on October 21, 2026, assigns the flaw a CVSS 3.1 score of 9.1 and advises distrusting impacted intermediate certificate authority... Weiterlesen

Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks

Fri, 23 Oct 2026 09:21:26 +0200

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Fri, 23 Oct 2026 08:08:18 +0200

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle Java SE and GraalVM. The update blocks affected intermediate certificate authority... Weiterlesen

CVE-2026-101457 | Oracle Siebel Apps up to 26.9 eDetailing sql injection (Nessus ID 370447)

Thu, 22 Oct 2026 23:48:01 +0200

A vulnerability has been found in Oracle Siebel Apps up to 26.9 and classified as critical. This affects an unknown function of the component eDetailing. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2026-101457. The attack is possible to be carried out remotely. No exploit exists. The affected component... Weiterlesen

CVE-2026-101495 | Oracle Siebel CRM Development up to 26.9 Siebel Approval Manager input validation (Nessus ID 370447)

Thu, 22 Oct 2026 23:48:01 +0200

A vulnerability was found in Oracle Siebel CRM Development up to 26.9. It has been declared as critical. Affected by this issue is some unknown functionality of the component Siebel Approval Manager. Executing a manipulation can lead to improper input validation. This vulnerability is handled as CVE-2026-101495. The attack can be executed... Weiterlesen

CVE-2026-101446 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager privileges management (Nessus ID 370447)

Thu, 22 Oct 2026 22:41:31 +0200

A vulnerability identified as critical has been detected in Oracle Siebel CRM Cloud Applications up to 26.9. Impacted is an unknown function of the component Siebel Cloud Manager. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-101446. The attack can be initiated remotely. There is not any... Weiterlesen

CVE-2026-101740 | Oracle Agile Engineering Data Management 6.2.1 Engineering Communication Interface privileges management (EUVD-2026-106141)

Thu, 22 Oct 2026 20:47:14 +0200

A vulnerability has been found in Oracle Agile Engineering Data Management 6.2.1 and classified as problematic. Affected by this issue is some unknown functionality of the component Engineering Communication Interface. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-101740. The attack can only... Weiterlesen

CVE-2026-101738 | Oracle Agile Engineering Data Management 6.2.1 Engineering Communication Interface improper authorization (EUVD-2026-106139)

Thu, 22 Oct 2026 20:47:14 +0200

A vulnerability was found in Oracle Agile Engineering Data Management 6.2.1. It has been rated as problematic. This issue affects some unknown processing of the component Engineering Communication Interface. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-101738. The attack may be initiated remotely. There... Weiterlesen

CVE-2026-91317 | Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 ADF Databinding improper authorization (Nessus ID 370457)

Thu, 22 Oct 2026 20:47:14 +0200

A vulnerability, which was classified as critical, was found in Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0. This affects an unknown function of the component ADF Databinding. Such manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-91317. The attack can be launched remotely. No exploit exists. You... Weiterlesen

CVE-2026-91318 | Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 Security Framework improper authorization (Nessus ID 370457)

Thu, 22 Oct 2026 20:47:14 +0200

A vulnerability, which was classified as problematic, has been found in Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0. The impacted element is an unknown function of the component Security Framework. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-91318. The attack can be initiated remotely. There is not any... Weiterlesen

CVE-2026-91319 | Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 Java Business Objects privileges management (Nessus ID 370457)

Thu, 22 Oct 2026 20:47:14 +0200

A vulnerability identified as problematic has been detected in Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0. Affected by this issue is some unknown functionality of the component Java Business Objects. This manipulation causes improper privilege management. This vulnerability is registered as CVE-2026-91319. Remote exploitation of the attack is... Weiterlesen

CVE-2026-83387 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JDBC improper authorization (Nessus ID 370276)

Thu, 22 Oct 2026 19:04:30 +0200

A vulnerability labeled as problematic has been found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE. The affected element is an unknown function of the component JDBC. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-83387. The attack may be launched remotely. There is no exploit... Weiterlesen

CVE-2026-101516 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Libraries improper authorization (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:37 +0200

A vulnerability described as critical has been identified in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. Affected is an unknown function of the component Libraries. The manipulation results in improper authorization. This vulnerability is identified as CVE-2026-101516. The attack can be executed remotely. There is not any... Weiterlesen

CVE-2026-83376 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JSSE improper authorization (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:37 +0200

A vulnerability categorized as problematic has been discovered in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE. This issue affects some unknown processing of the component JSSE. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-83376. The attack can be launched remotely. No... Weiterlesen

CVE-2026-83374 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE Security privileges management (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:36 +0200

A vulnerability was found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE. It has been rated as problematic. This vulnerability affects unknown code of the component Security. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-83374. The attack can be initiated... Weiterlesen

CVE-2026-83380 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JAAS information disclosure (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:36 +0200

A vulnerability marked as problematic has been reported in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. The impacted element is an unknown function of the component JAAS. This manipulation causes information disclosure. This vulnerability is registered as CVE-2026-83380. Remote exploitation of the attack is possible. No exploit... Weiterlesen

CVE-2026-83378 | Oracle Java SE 21.0.12.1/25.0.4.1/27 Compiler privileges management (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:36 +0200

A vulnerability has been found in Oracle Java SE 21.0.12.1/25.0.4.1/27 and classified as critical. This affects an unknown part of the component Compiler. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2026-83378. The attack can be initiated remotely. There is not any exploit available. The affected... Weiterlesen

CVE-2026-83381 | Oracle Java SE up to 27 Security privileges management (WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:36 +0200

A vulnerability identified as critical has been detected in Oracle Java SE up to 27. Impacted is an unknown function of the component Security. The manipulation leads to improper privilege management. This vulnerability is listed as CVE-2026-83381. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected... Weiterlesen

CVE-2026-101737 | Oracle Java SE 26.0.2 Compiler resource consumption (Nessus ID 370286 / WID-SEC-2026-4079)

Thu, 22 Oct 2026 17:51:16 +0200

A vulnerability marked as problematic has been reported in Oracle Java SE 26.0.2. Affected is an unknown function of the component Compiler. The manipulation leads to resource consumption. This vulnerability is referenced as CVE-2026-101737. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the... Weiterlesen

CVE-2026-91373 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JSSE resource consumption (Nessus ID 370280)

Thu, 22 Oct 2026 17:51:16 +0200

A vulnerability, which was classified as problematic, has been found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE. This affects an unknown function of the component JSSE. Performing a manipulation results in resource consumption. This vulnerability is reported as CVE-2026-91373. The attack is possible to be carried out... Weiterlesen

CVE-2026-113461 | Checkmk 2.5.0p14 mk-oracle privileges management (WID-SEC-2026-4072)

Thu, 22 Oct 2026 10:13:37 +0200

A vulnerability, which was classified as very critical, was found in Checkmk 2.5.0p14. The affected element is an unknown function of the component mk-oracle. Such manipulation leads to improper privilege management. This vulnerability is listed as CVE-2026-113461. The attack must be carried out locally. There is no available exploit. Weiterlesen

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Thu, 22 Oct 2026 09:54:52 +0200

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. Weiterlesen

CVE-2026-101668 | Oracle Customer Care up to 12.2.15 Internal Operations improper authorization (EUVD-2026-106072)

Thu, 22 Oct 2026 03:09:21 +0200

A vulnerability was found in Oracle Customer Care up to 12.2.15. It has been classified as critical. The affected element is an unknown function of the component Internal Operations. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-101668. The attack is possible to be carried out remotely. No... Weiterlesen

CVE-2026-101670 | Oracle Email Center up to 12.2.15 Message information disclosure (EUVD-2026-106074)

Thu, 22 Oct 2026 03:09:21 +0200

A vulnerability labeled as problematic has been found in Oracle Email Center up to 12.2.15. This affects an unknown function of the component Message Component. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-101670. The attack may be performed from remote. There is no available exploit. The affected... Weiterlesen

CVE-2026-101669 | Oracle Public Sector Human Resources up to 12.2.15 Regression Testing improper authorization (EUVD-2026-106073)

Thu, 22 Oct 2026 03:09:20 +0200

A vulnerability was found in Oracle Public Sector Human Resources up to 12.2.15. It has been rated as critical. This affects an unknown part of the component Regression Testing. Performing a manipulation results in improper authorization. This vulnerability is identified as CVE-2026-101669. The attack can be initiated remotely. There is not any... Weiterlesen

CVE-2026-101673 | Oracle US Federal Human Resources up to 12.2.15 Internal Operations privileges management (EUVD-2026-106077)

Thu, 22 Oct 2026 03:09:20 +0200

A vulnerability was found in Oracle US Federal Human Resources up to 12.2.15 and classified as problematic. The impacted element is an unknown function of the component Internal Operations. Executing a manipulation can lead to improper privilege management. The identification of this vulnerability is CVE-2026-101673. The attack may be launched... Weiterlesen

CVE-2026-101672 | Oracle Call Center Technology up to 12.2.15 Internal Operations privileges management (EUVD-2026-106076)

Thu, 22 Oct 2026 03:09:20 +0200

A vulnerability, which was classified as critical, has been found in Oracle Call Center Technology up to 12.2.15. Impacted is an unknown function of the component Internal Operations. Performing a manipulation results in improper privilege management. This vulnerability is reported as CVE-2026-101672. The attack is possible to be carried out... Weiterlesen

CVE-2026-101671 | Oracle Email Center up to 12.2.15 Message improper authorization (EUVD-2026-106075)

Thu, 22 Oct 2026 03:09:19 +0200

A vulnerability described as critical has been identified in Oracle Email Center up to 12.2.15. This affects an unknown part of the component Message Component. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-101671. The attack may be launched remotely. There is no exploit available. Upgrading the... Weiterlesen

CVE-2026-101675 | Oracle Mobile Field Service up to 12.2.15 Internal Operations privileges management (EUVD-2026-106079)

Thu, 22 Oct 2026 03:09:19 +0200

A vulnerability was found in Oracle Mobile Field Service up to 12.2.15. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Internal Operations. Performing a manipulation results in improper privilege management. This vulnerability is known as CVE-2026-101675. Attacking locally is a... Weiterlesen

CVE-2026-101674 | Oracle Mobile Field Service up to 12.2.15 Internal Operations privileges management (EUVD-2026-106078)

Thu, 22 Oct 2026 03:09:17 +0200

A vulnerability was found in Oracle Mobile Field Service up to 12.2.15 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Internal Operations. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-101674. An attack has to be approached locally.... Weiterlesen

CVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048)

Thu, 22 Oct 2026 00:44:36 +0200

A vulnerability was found in Oracle Marketing up to 12.2.15 and classified as critical. This affects an unknown part of the component Audience. Such manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-101640. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the... Weiterlesen

CVE-2026-101634 | Oracle Mobile Field Service up to 12.2.15 Internal Operations improper authorization (EUVD-2026-106042)

Thu, 22 Oct 2026 00:44:36 +0200

A vulnerability labeled as critical has been found in Oracle Mobile Field Service up to 12.2.15. This affects an unknown part of the component Internal Operations. Executing a manipulation can lead to improper authorization. This vulnerability is registered as CVE-2026-101634. It is possible to launch the attack remotely. No exploit is available.... Weiterlesen

CVE-2026-101379 | Oracle REST Data Services up to 26.1.0 ADP information disclosure (EUVD-2026-105795)

Thu, 22 Oct 2026 00:44:36 +0200

A vulnerability has been found in Oracle REST Data Services up to 26.1.0 and classified as problematic. Impacted is an unknown function of the component ADP. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2026-101379. The attack may be initiated remotely. There is no available exploit. The affected... Weiterlesen

CVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)

Thu, 22 Oct 2026 00:44:36 +0200

A vulnerability was found in Oracle Mobile Field Service up to 12.2.15. It has been declared as problematic. This issue affects some unknown processing of the component Admin UI. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-101660. The attack may be launched remotely. There is no... Weiterlesen

Oracle Patches 1,209 Security Flaws, Including Six CVSS 10.0 Bugs

Thu, 22 Oct 2026 00:30:40 +0200

Oracle's October 2026 update fixes 1,209 vulnerabilities, including six CVSS 10.0 flaws. See the affected products and what security teams should patch first. This article has been indexed from eSecurityPlanet Read the original article: Oracle Patches 1,209 Security Flaws, Including Six CVSS 10.0 Bugs The post Oracle Patches 1,209 Security Flaws,... Weiterlesen

Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security

Thu, 22 Oct 2026 00:21:13 +0200

The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure. Weiterlesen

CVE-2026-91364 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager improper authorization (EUVD-2026-106618)

Wed, 21 Oct 2026 22:42:19 +0200

A vulnerability was found in Oracle Siebel CRM Cloud Applications up to 26.9. It has been declared as critical. Affected is an unknown function of the component Siebel Cloud Manager. The manipulation results in improper authorization. This vulnerability was named CVE-2026-91364. The attack needs to be approached within the local network. There is... Weiterlesen

CVE-2026-91365 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager improper authorization (EUVD-2026-106619)

Wed, 21 Oct 2026 22:42:18 +0200

A vulnerability was found in Oracle Siebel CRM Cloud Applications up to 26.9. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Siebel Cloud Manager. This manipulation causes improper authorization. The identification of this vulnerability is CVE-2026-91365. It is possible to initiate the... Weiterlesen

CVE-2026-91367 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager improper authorization (EUVD-2026-106621)

Wed, 21 Oct 2026 22:42:18 +0200

A vulnerability identified as problematic has been detected in Oracle Siebel CRM Cloud Applications up to 26.9. This affects an unknown part of the component Siebel Cloud Manager. Performing a manipulation results in improper authorization. This vulnerability is identified as CVE-2026-91367. The attack is only possible with local access. There is... Weiterlesen

CVE-2026-91366 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager privileges management (EUVD-2026-106620)

Wed, 21 Oct 2026 22:42:18 +0200

A vulnerability categorized as critical has been discovered in Oracle Siebel CRM Cloud Applications up to 26.9. Affected by this issue is some unknown functionality of the component Siebel Cloud Manager. Such manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-91366. It is possible to launch the attack... Weiterlesen

CVE-2026-91368 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager improper authorization (EUVD-2026-106622)

Wed, 21 Oct 2026 22:42:18 +0200

A vulnerability labeled as problematic has been found in Oracle Siebel CRM Cloud Applications up to 26.9. This vulnerability affects unknown code of the component Siebel Cloud Manager. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-91368. The attack is restricted to local execution. No... Weiterlesen

PostgreSQL vs Oracle: When Higher Cost Means Better Performance

Wed, 21 Oct 2026 22:38:27 +0200

Database optimizers don’t see the future. They make decisions based on statistics, estimates, and cost models — and most of the time, those decisions work remarkably well. But what if the optimizer says: “The Sequential Scan is cheaper.” Weiterlesen

CVE-2026-87302 | Oracle WebLogic Server 12.2.1.4.0/14.1.1.0.0/14.1.2.0.0/15.1.1.0.0 Core access control (EUVD-2026-106343)

Wed, 21 Oct 2026 19:26:27 +0200

A vulnerability categorized as critical has been discovered in Oracle WebLogic Server 12.2.1.4.0/14.1.1.0.0/14.1.2.0.0/15.1.1.0.0. This affects an unknown function of the component Core. Such manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-87302. The attack can be launched remotely. No exploit... Weiterlesen

CVE-2026-101499 | Oracle WebCenter Sites 12.2.1.4.0/14.1.2.0.0 privileges management (EUVD-2026-105914)

Wed, 21 Oct 2026 19:26:27 +0200

A vulnerability, which was classified as critical, has been found in Oracle WebCenter Sites 12.2.1.4.0/14.1.2.0.0. The impacted element is an unknown function. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-101499. The attack can be initiated remotely. There is not any exploit available. It is... Weiterlesen

CVE-2026-101763 | Oracle Communications BRM 15.0.0.0.0/15.0.1.0.0/15.1.0.0.0/15.2.0.0.0 Cloud Native Deployment deserialization (EUVD-2026-106164)

Wed, 21 Oct 2026 19:26:27 +0200

A vulnerability, which was classified as critical, has been found in Oracle Communications BRM 15.0.0.0.0/15.0.1.0.0/15.1.0.0.0/15.2.0.0.0. Affected is an unknown function of the component Cloud Native Deployment. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-101763. The attack may be initiated... Weiterlesen

CVE-2026-101537 | Oracle Solaris 11.4 Utility privileges management (EUVD-2026-105948)

Wed, 21 Oct 2026 19:26:27 +0200

A vulnerability classified as very critical was found in Oracle Solaris 11.4. This affects an unknown part of the component Utility. Executing a manipulation can lead to improper privilege management. The identification of this vulnerability is CVE-2026-101537. The attack may be launched remotely. There is no exploit available. Upgrading the... Weiterlesen

CVE-2026-101484 | Oracle Secure Backup 19.1.0.0.0/19.1.0.1.0 Backup/Restore privileges management (EUVD-2026-105900)

Wed, 21 Oct 2026 19:26:26 +0200

A vulnerability described as very critical has been identified in Oracle Secure Backup 19.1.0.0.0/19.1.0.1.0. Affected by this issue is some unknown functionality of the component Backup/Restore. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-101484. The attack may be launched remotely. There... Weiterlesen

CVE-2026-101521 | Oracle APEX up to 24.1.21/24.2.20/26.1.4 privileges management (EUVD-2026-105934)

Wed, 21 Oct 2026 19:26:25 +0200

A vulnerability has been found in Oracle APEX up to 24.1.21/24.2.20/26.1.4 and classified as critical. This issue affects some unknown processing. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-101521. The attack can be initiated remotely. There is not any exploit available. The affected... Weiterlesen

CVE-2026-83396 | Oracle Data Integrator 12.2.1.4.0/14.1.2.0.0 Console Repository Explorer privileges management (EUVD-2026-106314)

Wed, 21 Oct 2026 19:26:24 +0200

A vulnerability was found in Oracle Data Integrator 12.2.1.4.0/14.1.2.0.0 and classified as critical. Affected by this issue is some unknown functionality of the component Console Repository Explorer. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-83396. The attack may be launched remotely. There... Weiterlesen

CVE-2026-60432 | Oracle Solaris 11.3/11.4 Image Packaging System privileges management (EUVD-2026-106256)

Wed, 21 Oct 2026 19:26:24 +0200

A vulnerability classified as very critical has been found in Oracle Solaris 11.3/11.4. This vulnerability affects unknown code of the component Image Packaging System. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-60432. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

CVE-2026-91234 | Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 Fabric Layer privileges management (EUVD-2026-106489)

Wed, 21 Oct 2026 19:26:23 +0200

A vulnerability was found in Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0. It has been classified as critical. Impacted is an unknown function of the component Fabric Layer. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-2026-91234. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

CVE-2026-101767 | Oracle Application Object Library up to 12.2.15 Core privileges management (EUVD-2026-106168)

Wed, 21 Oct 2026 19:26:22 +0200

A vulnerability has been found in Oracle Application Object Library up to 12.2.15 and classified as critical. Impacted is an unknown function of the component Core. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-101767. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

CVE-2026-91220 | Oracle Business Process Management Suite 12.2.1.4.0/14.1.2.0.0 Human Workflow privileges management (EUVD-2026-106475)

Wed, 21 Oct 2026 19:26:22 +0200

A vulnerability, which was classified as critical, has been found in Oracle Business Process Management Suite 12.2.1.4.0/14.1.2.0.0. This impacts an unknown function of the component Human Workflow. Performing a manipulation results in improper privilege management. This vulnerability is known as CVE-2026-91220. Remote exploitation of the attack... Weiterlesen

CVE-2026-91233 | Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 Enterprise Scheduling System privileges management (EUVD-2026-106488)

Wed, 21 Oct 2026 19:26:22 +0200

A vulnerability was found in Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 and classified as critical. This issue affects some unknown processing of the component Enterprise Scheduling System. Such manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-91233. The attack can be launched remotely. No... Weiterlesen

[NEU] [mittel] Oracle NoSQL Database: Schwachstelle gefährdet Verfügbarkeit

Wed, 21 Oct 2026 18:59:54 +0200

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle NoSQL Database ausnutzen, um die Verfügbarkeit zu gefährden. Weiterlesen

[NEU] [hoch] Oracle Secure Backup: Mehrere Schwachstellen

Wed, 21 Oct 2026 18:59:54 +0200

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Secure Backup ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden. Weiterlesen

[NEU] [mittel] Oracle SQL Developer: Schwachstelle gefährdet Verfügbarkeit

Wed, 21 Oct 2026 18:59:53 +0200

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle SQL Developer ausnutzen, um die Verfügbarkeit zu gefährden. Weiterlesen

[NEU] [mittel] Oracle Commerce: Mehrere Schwachstellen

Wed, 21 Oct 2026 18:59:44 +0200

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit und Integrität zu gefährden. Weiterlesen

[NEU] [mittel] Oracle TimesTen In-Memory Database: Mehrere Schwachstellen

Wed, 21 Oct 2026 18:59:41 +0200

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Oracle TimesTen In-Memory Database ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden. Weiterlesen

Oracles Oktober-Updates beheben weit über 1000 Schwachstellen

Wed, 21 Oct 2026 13:27:48 +0200

Oracle hält nur alle drei Monate einen turnusmäßigen Patch Day ab. Der US-amerikanische Software-Hersteller spricht dabei von „Critical Patch Updates“ (CPU). Aufgrund des umfangreichen Produktportfolios sowie des relativ langen Update-Turnus fallen dabei regelmäßig etliche hundert zu schließende Sicherheitslücken an. Im Oktober sind 1295... Weiterlesen

Oracle-Patchday mit 1295 Sicherheitspatches

Wed, 21 Oct 2026 12:58:58 +0200

Oracle begeht seinen CPU-Patchday im Oktober und verteilt dabei 1295 Sicherheitspatches für diverse Produkten. Weiterlesen

Oracles Oktober-Updates beheben weit über 1000 Schwachstellen

Wed, 21 Oct 2026 12:51:23 +0200

Oracle-Patchday mit 1295 Sicherheitspatches

Wed, 21 Oct 2026 12:51:17 +0200

Oracle begeht seinen CPU-Patchday im Oktober und verteilt dabei 1295 Sicherheitspatches für diverse Produkten. Weiterlesen

Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products

Wed, 21 Oct 2026 11:25:28 +0200

Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the advisory addresses vulnerabilities in Oracle software as well as third-party components. Notably, it addresses critical flaws that attackers can exploit remotely without authentication.... Weiterlesen

Oracle Releases Massive Security Update for Fusion Middleware and E-Business Suite

Wed, 21 Oct 2026 11:25:19 +0200

Oracle has released its October 2026 Critical Patch Update, delivering 1,295 new security patches across its enterprise portfolio. Published October 20, the advisory includes extensive fixes for Fusion Middleware and E-Business Suite, addressing vulnerabilities that attackers could exploit remotely without credentials. Fusion Middleware receives... Weiterlesen

Oracle 26ai Histogram Dictionary Vulnerability [CVE-2025-53051]

Tue, 20 Oct 2026 22:22:18 +0200

Topic: Oracle 26ai Histogram Dictionary Vulnerability [CVE-2025-53051] Risk: Medium Text:Title: Oracle 26ai Histogram Dictionary Vulnerability [CVE-2025-53051] Product: Database Manufacturer: Oracle Affected Vers... Weiterlesen

AstraZeneca works with Oracle to speed up drug trials

Tue, 20 Oct 2026 17:32:22 +0200

Pharmaceutical company is working with Oracle to advance the use of AI and data analytics in medicine Weiterlesen

Oracle Manipulation Risk Report: Morpho Blue

Mon, 19 Oct 2026 22:30:04 +0200

Oracle Manipulation Risk Report: Morpho Blue Target Protocol: Morpho Blue (TVL: $11108.3M) Oracle Manipulation Risk Report – Morpho Blue Protocol: Morpho Blue (Ethereum + L2) – TVL ≈ $11.1 B Date: 19 Oct 2026 Prepared by: Senior DeFi Security Researcher – Confidential 1. Executive Summary Morpho Blue is a permission‑less, interest‑rate‑matching... Weiterlesen

CVE-2026-60589 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Security information disclosure (Nessus ID 338214 / WID-SEC-2026-2897)

Mon, 19 Oct 2026 20:35:37 +0200

A vulnerability identified as problematic has been detected in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition up to 26.0.2. Affected is an unknown function of the component Security. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-60589. Remote exploitation of the attack is... Weiterlesen

CVE-2026-61308 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE Networking improper authorization (Nessus ID 338214 / WID-SEC-2026-2897)

Mon, 19 Oct 2026 20:35:37 +0200

A vulnerability was found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE. It has been declared as problematic. The affected element is an unknown function of the component Networking. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-61308. The attack may be launched remotely. There... Weiterlesen

CVE-2026-70906 | Oracle Java SE 25.0.4/26.0.2 2D sandbox (Nessus ID 339125 / WID-SEC-2026-2897)

Mon, 19 Oct 2026 20:35:37 +0200

A vulnerability, which was classified as problematic, was found in Oracle Java SE 25.0.4/26.0.2. This impacts an unknown function of the component 2D. The manipulation results in sandbox issue. This vulnerability is identified as CVE-2026-70906. The attack can be executed remotely. There is not any exploit available. You should upgrade the... Weiterlesen

CVE-2026-70907 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JSSE denial of service (Nessus ID 338214 / WID-SEC-2026-2897)

Mon, 19 Oct 2026 20:35:37 +0200

A vulnerability, which was classified as problematic, has been found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. This affects an unknown function of the component JSSE. The manipulation leads to denial of service. This vulnerability is referenced as CVE-2026-70907. Remote exploitation of the attack is possible. No exploit is... Weiterlesen

ShinyHunters Exploits Oracle PeopleSoft to Steal Sensitive Data

Mon, 19 Oct 2026 10:33:16 +0200

Imagine finding out that someone has been accessing your organization’s systems, stealing data, and moving between servers without anyone noticing. That’s the kind of situation organizations faced when ShinyHunters exploited a critical vulnerability in Oracle PeopleSoft.The attacks took place from May 27 to June 9, 2026, before Oracle issued its... Weiterlesen

The Chatbot Oracle

Sun, 18 Oct 2026 19:18:36 +0200

More people are turning to artificial intelligence for help making personal decisions. What does that cost us? Weiterlesen

Darrick Wong removes himself as an IOmap maintainer: "After 14 years at Oracle and 23 years working on Linux, I've decided to step back for a while."

Sat, 17 Oct 2026 04:14:45 +0200

submitted by /u/anh0516 [link] [comments] Weiterlesen

CVE-2018-7489 | Oracle Retail Invoice Matching 15.0/16.0 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:37 +0200

A vulnerability has been found in Oracle Retail Invoice Matching 15.0/16.0 and classified as very critical. Affected is an unknown function of the component jackson-databind. The manipulation leads to incomplete blacklist. This vulnerability is uniquely identified as CVE-2018-7489. The attack is possible to be carried out remotely. No exploit... Weiterlesen

CVE-2018-7489 | Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0 Centralized Third Party Jars incomplete blacklist (Nessus ID 233045 / ID 236873)

Fri, 16 Oct 2026 16:18:37 +0200

A vulnerability was found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0 and classified as very critical. Affected is an unknown function of the component Centralized Third Party Jars. The manipulation results in incomplete blacklist. This vulnerability is reported as CVE-2018-7489. The attack can be launched remotely. No exploit... Weiterlesen

CVE-2018-7489 | Oracle Global Lifecycle Management OPatchAuto up to 12.2.0.1.13 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236873)

Fri, 16 Oct 2026 16:18:37 +0200

A vulnerability marked as critical has been reported in Oracle Global Lifecycle Management OPatchAuto up to 12.2.0.1.13. The affected element is an unknown function of the component jackson-databind. This manipulation causes incomplete blacklist. The identification of this vulnerability is CVE-2018-7489. The attack can only be executed locally.... Weiterlesen

CVE-2018-7489 | Oracle Retail Xstore Point of Service up to 17.0.2 Xenvironment incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:37 +0200

A vulnerability marked as critical has been reported in Oracle Retail Xstore Point of Service up to 17.0.2. Affected is an unknown function of the component Xenvironment. Performing a manipulation results in incomplete blacklist. This vulnerability is cataloged as CVE-2018-7489. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

CVE-2018-7489 | Oracle Retail Sales Audit 15.0/16.0 Operational Insights deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:37 +0200

A vulnerability labeled as very critical has been found in Oracle Retail Sales Audit 15.0/16.0. The affected element is an unknown function of the component Operational Insights. The manipulation results in deserialization. This vulnerability is cataloged as CVE-2018-7489. The attack may be launched remotely. There is no exploit available. The... Weiterlesen

CVE-2018-7489 | Oracle Retail Assortment Planning 15.0 Application Core incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:36 +0200

A vulnerability classified as very critical was found in Oracle Retail Assortment Planning 15.0. The impacted element is an unknown function of the component Application Core. Such manipulation leads to incomplete blacklist. This vulnerability is traded as CVE-2018-7489. The attack may be launched remotely. There is no exploit available. Upgrading... Weiterlesen

CVE-2018-7489 | Oracle Retail Allocation 15.0/16.0 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:36 +0200

A vulnerability classified as very critical has been found in Oracle Retail Allocation 15.0/16.0. The affected element is an unknown function of the component jackson-databind. This manipulation causes incomplete blacklist. This vulnerability appears as CVE-2018-7489. The attack may be initiated remotely. There is no available exploit. It is... Weiterlesen

CVE-2018-7489 | Oracle JD Edwards EnterpriseOne Tools 9.2 Web Runtime incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 16:18:36 +0200

A vulnerability, which was classified as very critical, was found in Oracle JD Edwards EnterpriseOne Tools 9.2. Impacted is an unknown function of the component Web Runtime. The manipulation results in incomplete blacklist. This vulnerability is identified as CVE-2018-7489. The attack can be executed remotely. There is not any exploit available.... Weiterlesen

CVE-2018-7489 | Oracle Enterprise Manager for Virtualization 13.2.2/13.2.3 Plug-In Lifecycle deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability marked as critical has been reported in Oracle Enterprise Manager for Virtualization 13.2.2/13.2.3. Affected is an unknown function of the component Plug-In Lifecycle. This manipulation causes deserialization. This vulnerability is registered as CVE-2018-7489. Remote exploitation of the attack is possible. No exploit is available.... Weiterlesen

CVE-2018-7489 | Oracle JD Edwards EnterpriseOne Tools 9.2 EnterpriseOne Mobility incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability, which was classified as very critical, has been found in Oracle JD Edwards EnterpriseOne Tools 9.2. This issue affects some unknown processing of the component EnterpriseOne Mobility. The manipulation leads to incomplete blacklist. This vulnerability is referenced as CVE-2018-7489. Remote exploitation of the attack is possible. No... Weiterlesen

CVE-2018-7489 | Oracle JD Edwards EnterpriseOne Orchestrator 9.2 IoT Orchestrator Security incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability classified as very critical was found in Oracle JD Edwards EnterpriseOne Orchestrator 9.2. This vulnerability affects unknown code of the component IoT Orchestrator Security. Executing a manipulation can lead to incomplete blacklist. The identification of this vulnerability is CVE-2018-7489. The attack may be launched remotely.... Weiterlesen

CVE-2018-7489 | Oracle Construction/Engineering Suite 15.2/16.2/17.12 Primavera Gateway incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability has been found in Oracle Construction and Engineering Suite 15.2/16.2/17.12 and classified as very critical. This impacts an unknown function of the component Primavera Gateway. The manipulation leads to incomplete blacklist. This vulnerability is uniquely identified as CVE-2018-7489. The attack is possible to be carried out... Weiterlesen

CVE-2018-7489 | Oracle Database Server 18c Rapid Home Provisioning incomplete blacklist (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability marked as problematic has been reported in Oracle Database Server 18c. Affected by this vulnerability is an unknown functionality of the component Rapid Home Provisioning. Performing a manipulation results in incomplete blacklist. This vulnerability is reported as CVE-2018-7489. The attacker must have access to the local network to... Weiterlesen

CVE-2018-7489 | Oracle WebLogic Server 10.3.6.0/12.1.3.0/12.2.1.2/12.2.1.3 Console deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability marked as critical has been reported in Oracle WebLogic Server 10.3.6.0/12.1.3.0/12.2.1.2/12.2.1.3. This vulnerability affects unknown code of the component Console. The manipulation leads to deserialization. This vulnerability is referenced as CVE-2018-7489. Remote exploitation of the attack is possible. No exploit is available.... Weiterlesen

CVE-2018-7489 | Oracle WebCenter Portal 12.2.1.3.0 Security Framework deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability labeled as critical has been found in Oracle WebCenter Portal 12.2.1.3.0. This affects an unknown part of the component Security Framework. Executing a manipulation can lead to deserialization. The identification of this vulnerability is CVE-2018-7489. The attack may be launched remotely. There is no exploit available. The affected... Weiterlesen

CVE-2018-7489 | Oracle Financial Services Analytical Applications Infrastructure deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability was found in Oracle Financial Services Analytical Applications Infrastructure 8.0.x. It has been declared as very critical. This issue affects some unknown processing of the component Infrastructure. Executing a manipulation can lead to deserialization. This vulnerability is handled as CVE-2018-7489. The attack can be executed... Weiterlesen

CVE-2018-7489 | Oracle Global Lifecycle Management OPatchAuto deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability was found in Oracle Global Lifecycle Management. It has been declared as critical. The impacted element is an unknown function of the component OPatchAuto. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2018-7489. The attack may be performed from remote. There is no available exploit. It is... Weiterlesen

CVE-2018-7489 | Oracle Financial Services Market Risk Measurement 8.0.5 Infrastructure deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability categorized as very critical has been discovered in Oracle Financial Services Market Risk Measurement and Management 8.0.5. The affected element is an unknown function of the component Infrastructure. The manipulation results in deserialization. This vulnerability was named CVE-2018-7489. The attack may be performed from remote.... Weiterlesen

CVE-2018-7489 | Oracle Financial Services Hedge Management 8.0.4/8.0.5 Hedge Definition deserialization (Nessus ID 109906 / ID 236791)

Fri, 16 Oct 2026 14:31:28 +0200

A vulnerability was found in Oracle Financial Services Hedge Management and IFRS Valuations 8.0.4/8.0.5. It has been rated as very critical. Impacted is an unknown function of the component Hedge Definition. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2018-7489. The attack is possible to be carried... Weiterlesen

[UPDATE] [mittel] Oracle VM: Schwachstelle ermöglicht Denial of Service

Fri, 16 Oct 2026 14:03:29 +0200

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle VM ausnutzen, um einen Denial of Service Angriff durchzuführen. Weiterlesen

CVE-2018-1305 | Oracle Retail Order Broker 5.1/5.2/15.0 Upgrade Install access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability classified as critical was found in Oracle Retail Order Broker 5.1/5.2/15.0. This affects an unknown part of the component Upgrade Install. The manipulation results in improper access controls. This vulnerability is reported as CVE-2018-1305. The attack can be launched remotely. No exploit exists. Upgrading the affected component... Weiterlesen

CVE-2018-1305 | Oracle Siebel CRM 18.7/18.8/18.9 Marketing Apps access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability, which was classified as critical, was found in Oracle Siebel CRM 18.7/18.8/18.9. This issue affects some unknown processing of the component Marketing Apps. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2018-1305. The attack may be launched remotely. There is no exploit available. You... Weiterlesen

CVE-2018-1305 | Oracle Instant Messaging Server 10.0.1.2.0 Apache Tika access control (Nessus ID 110264 / ID 176464)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability categorized as critical has been discovered in Oracle Instant Messaging Server 10.0.1.2.0. This impacts an unknown function of the component Apache Tika. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2018-1305. The attack may be launched remotely. There is no exploit available. It is... Weiterlesen

CVE-2018-1305 | Oracle MICROS Relate CRM Software 11.4 Internal Operations information disclosure (ID 87328 / BID-103144)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability was found in Oracle MICROS Relate CRM Software 11.4 and classified as critical. Impacted is an unknown function of the component Internal Operations. Executing a manipulation can lead to information disclosure. This vulnerability is tracked as CVE-2018-1305. The attack can be launched remotely. No exploit exists. It is suggested to... Weiterlesen

CVE-2018-1305 | Oracle Managed File Transfer 12.1.3.0.0/12.2.1.3.0 MFT Runtime Server information disclosure (ID 87328 / BID-103144)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability, which was classified as critical, has been found in Oracle Managed File Transfer 12.1.3.0.0/12.2.1.3.0. Affected by this vulnerability is an unknown functionality of the component MFT Runtime Server. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2018-1305. The attack is possible... Weiterlesen

CVE-2018-1305 | Oracle FMW Platform 12.2.1.3.0 Provisioning information disclosure (ID 87328 / BID-103144)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability classified as critical was found in Oracle FMW Platform 12.2.1.3.0. Affected is an unknown function of the component Provisioning. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2018-1305. The attack can be executed remotely. There is not any exploit available. Upgrading the affected... Weiterlesen

CVE-2018-1305 | Oracle Transportation Management 6.3.7 Install access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability described as critical has been identified in Oracle Transportation Management 6.3.7. The affected element is an unknown function of the component Install. Such manipulation leads to improper access controls. This vulnerability is listed as CVE-2018-1305. The attack may be performed from remote. There is no available exploit.... Weiterlesen

CVE-2018-1305 | Oracle Agile PLM 9.3.3/9.3.4/9.3.5/9.3.6 Folders/Files / Attachments access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability marked as critical has been reported in Oracle Agile PLM 9.3.3/9.3.4/9.3.5/9.3.6. Impacted is an unknown function of the component Folders/Files / Attachments. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2018-1305. The attack is possible to be carried out remotely. No exploit exists. It... Weiterlesen

CVE-2018-1305 | Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1 Install (Apache Tomcat) access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 11:20:46 +0200

A vulnerability labeled as critical has been found in Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1. This issue affects some unknown processing of the component Install (Apache Tomcat). The manipulation results in improper access controls. This vulnerability is identified as CVE-2018-1305. The attack can be executed remotely. There is... Weiterlesen

CVE-2018-1305 | Oracle MICROS XBRi up to 10.8.3 Retail access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 10:03:23 +0200

A vulnerability classified as critical has been found in Oracle MICROS XBRi up to 10.8.3. Affected by this issue is some unknown functionality of the component Retail. The manipulation leads to improper access controls. This vulnerability is documented as CVE-2018-1305. The attack can be initiated remotely. There is not any exploit available. It... Weiterlesen

CVE-2018-1305 | Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Tomcat access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 10:03:23 +0200

A vulnerability marked as critical has been reported in Oracle Hospitality Guest Access 4.2.0/4.2.1. Impacted is an unknown function of the component Apache Tomcat. Performing a manipulation results in improper access controls. This vulnerability was named CVE-2018-1305. The attack may be initiated remotely. There is no available exploit. It is... Weiterlesen

CVE-2018-1305 | Oracle WebCenter Sites 11.1.1.8.0/12.2.1.3.0 Advanced UI access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 10:03:23 +0200

A vulnerability was found in Oracle WebCenter Sites 11.1.1.8.0/12.2.1.3.0. It has been classified as critical. The impacted element is an unknown function of the component Advanced UI. This manipulation causes improper access controls. This vulnerability appears as CVE-2018-1305. The attack may be initiated remotely. There is no available exploit.... Weiterlesen

CVE-2018-1305 | Oracle Construction/Engineering Suite 17.1/17.2/17.3 Instantis EnterpriseTrack access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 10:03:23 +0200

A vulnerability was found in Oracle Construction and Engineering Suite 17.1/17.2/17.3. It has been declared as critical. Affected by this issue is some unknown functionality of the component Instantis EnterpriseTrack. Such manipulation leads to improper access controls. This vulnerability is referenced as CVE-2018-1305. It is possible to launch... Weiterlesen

CVE-2018-1305 | Oracle Secure Global Desktop 5.3/5.4 Application Server access control (Nessus ID 110264 / ID 87328)

Fri, 16 Oct 2026 10:03:23 +0200

A vulnerability marked as critical has been reported in Oracle Secure Global Desktop 5.3/5.4. This issue affects some unknown processing of the component Application Server. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2018-1305. Remote exploitation of the attack is possible. No exploit is available.... Weiterlesen

CVE-2017-5664 | Oracle Communications Instant Messaging Server 10.0.1 Apache Tomcat exceptional condition (ID 157497 / BID-98888)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability has been found in Oracle Communications Instant Messaging Server 10.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Apache Tomcat. This manipulation causes handling of exceptional conditions. This vulnerability is tracked as CVE-2017-5664. The attack is possible to be... Weiterlesen

CVE-2017-5664 | Oracle Interactive Session Recorder 6.0/6.1/6.2 Apache Tomcat exceptional condition (Nessus ID 103029 / ID 185137)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability was found in Oracle Interactive Session Recorder 6.0/6.1/6.2 and classified as critical. Impacted is an unknown function of the component Apache Tomcat. Executing a manipulation can lead to handling of exceptional conditions. This vulnerability is registered as CVE-2017-5664. It is possible to launch the attack remotely. No exploit... Weiterlesen

CVE-2017-5664 | Oracle Communications Application Session Controller 3.7.1/3.8.0 Apache Tomcat exceptional condition (ID 157497 / BID-98888)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability identified as critical has been detected in Oracle Communications Application Session Controller 3.7.1/3.8.0. This vulnerability affects unknown code of the component Apache Tomcat. The manipulation leads to handling of exceptional conditions. This vulnerability is traded as CVE-2017-5664. It is possible to initiate the attack... Weiterlesen

CVE-2017-5664 | Oracle Retail Convenience/Fuel POS Software 2.1.132 OPT Server 7pk security (Nessus ID 103029 / ID 157497)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability classified as critical has been found in Oracle Retail Convenience and Fuel POS Software 2.1.132. Impacted is an unknown function of the component OPT Server. The manipulation leads to 7pk security features. This vulnerability is documented as CVE-2017-5664. The attack can be initiated remotely. There is not any exploit available.... Weiterlesen

CVE-2017-5664 | Oracle Siebel CRM 17 Siebel UI Framework exceptional condition (Nessus ID 103029 / ID 157497)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability was found in Oracle Siebel CRM 17. It has been classified as critical. This impacts an unknown function of the component Siebel UI Framework. The manipulation leads to handling of exceptional conditions. This vulnerability is uniquely identified as CVE-2017-5664. The attack is possible to be carried out remotely. No exploit exists.... Weiterlesen

CVE-2017-5664 | Oracle Enterprise Manager for MySQL Database 12.1.0.4 EM Plugin: General (Apache Tomcat) exceptional condition (Nessus ID 103029 / ID 157497)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability, which was classified as critical, has been found in Oracle Enterprise Manager for MySQL Database 12.1.0.4. Affected is an unknown function of the component EM Plugin: General (Apache Tomcat). The manipulation leads to handling of exceptional conditions. This vulnerability is documented as CVE-2017-5664. The attack can be initiated... Weiterlesen

CVE-2017-5664 | Oracle Retail Order Management System 5 Upgrade Install exceptional condition (Nessus ID 103029 / ID 157497)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability categorized as critical has been discovered in Oracle Retail Order Management System 5. This impacts an unknown function of the component Upgrade Install. The manipulation results in handling of exceptional conditions. This vulnerability is identified as CVE-2017-5664. The attack can be executed remotely. There is not any exploit... Weiterlesen

CVE-2017-5664 | Oracle Agile PLM 9.3.5/9.3.6 Apache Tomcat 7pk security (Nessus ID 101661 / ID 157497)

Fri, 16 Oct 2026 07:51:35 +0200

A vulnerability identified as critical has been detected in Oracle Agile PLM 9.3.5/9.3.6. The impacted element is an unknown function of the component Apache Tomcat. The manipulation leads to 7pk security features. This vulnerability is listed as CVE-2017-5664. The attack may be initiated remotely. There is no available exploit. You should upgrade... Weiterlesen

Building ora-tui with Google Antigravity & Gemini 4 Argon: An MS-DOS Retro TUI & OpenTelemetry Exporter for Oracle RAC, DB & SAN Multipath

Fri, 16 Oct 2026 07:49:23 +0200

Managing enterprise Oracle RAC, Oracle Restart, and Single Instance databases over SSH often feels like juggling a dozen terminal tabs at 3:00 AM. You have sqlplus open in one window, crsctl status resource -t in another, lsnrctl status in a third, rman in a fourth, and multipath -ll or df -i in a fifth to figure out why a LUN path dropped or why... Weiterlesen

CVE-2017-5664 | Oracle MICROS Relate CRM Software 10.8.x/11.4.x/15.0.x Apache Tomcat 7pk security (Nessus ID 101661 / ID 157497)

Fri, 16 Oct 2026 06:50:01 +0200

A vulnerability labeled as critical has been found in Oracle MICROS Relate CRM Software 10.8.x/11.4.x/15.0.x. This affects an unknown part of the component Apache Tomcat. Such manipulation leads to 7pk security features. This vulnerability is documented as CVE-2017-5664. The attack can be executed remotely. There is not any exploit available. The... Weiterlesen

CVE-2017-5664 | Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1 Install 7pk security (Nessus ID 101661 / ID 157497)

Fri, 16 Oct 2026 06:50:01 +0200

A vulnerability categorized as critical has been discovered in Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1. The affected element is an unknown function of the component Install. Executing a manipulation can lead to 7pk security features. This vulnerability is tracked as CVE-2017-5664. The attack can be launched remotely. No exploit... Weiterlesen

CVE-2017-5664 | Oracle Transportation Management up to 6.3.7 Apache Tomcat 7pk security (Nessus ID 101270 / ID 157497)

Fri, 16 Oct 2026 06:50:01 +0200

A vulnerability labeled as critical has been found in Oracle Transportation Management up to 6.3.7. This issue affects some unknown processing of the component Apache Tomcat. Executing a manipulation can lead to 7pk security features. The identification of this vulnerability is CVE-2017-5664. The attack may be launched remotely. There is no... Weiterlesen

CVE-2017-5664 | Oracle MICROS Retail XBRi Loss Prevention up to 10.8.1 Apache Tomcat 7pk security (Nessus ID 101270 / ID 157497)

Fri, 16 Oct 2026 06:50:00 +0200

A vulnerability described as critical has been identified in Oracle MICROS Retail XBRi Loss Prevention up to 10.8.1. Affected by this vulnerability is an unknown functionality of the component Apache Tomcat. Such manipulation leads to 7pk security features. This vulnerability is listed as CVE-2017-5664. The attack may be performed from remote.... Weiterlesen

CVE-2017-5664 | Oracle MySQL Enterprise Monitor up to 3.2.8.2223/3.3.4.3247/3.4.2.4181 Apache Tomcat 7pk security (Nessus ID 101270 / ID 157497)

Fri, 16 Oct 2026 06:50:00 +0200

A vulnerability was found in Oracle MySQL Enterprise Monitor up to 3.2.8.2223/3.3.4.3247/3.4.2.4181 and classified as critical. Impacted is an unknown function of the component Apache Tomcat. The manipulation results in 7pk security features. This vulnerability was named CVE-2017-5664. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2017-5664 | Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Tomcat 7pk security (Nessus ID 101270 / ID 157497)

Fri, 16 Oct 2026 06:50:00 +0200

A vulnerability described as very critical has been identified in Oracle Hospitality Guest Access 4.2.0/4.2.1. This impacts an unknown function of the component Apache Tomcat. Executing a manipulation can lead to 7pk security features. This vulnerability is handled as CVE-2017-5664. The attack can be executed remotely. There is not any exploit... Weiterlesen

CVE-2016-10165 | Oracle Java SE 7u151/8u144/9 Little CMS 2 out-of-bounds (Nessus ID 96818 / ID 171692)

Fri, 16 Oct 2026 05:08:53 +0200

A vulnerability was found in Oracle Java SE 7u151/8u144/9. It has been declared as problematic. This issue affects some unknown processing of the component Little CMS 2. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2016-10165. The attack is only possible with local access. There is not any exploit... Weiterlesen

CVE-2016-1181 | Oracle Communications Network Integrity up to 7.3.6 MSS Integration Cartridge memory corruption (ID 87288 / BID-91068)

Fri, 16 Oct 2026 03:49:21 +0200

A vulnerability was found in Oracle Communications Network Integrity 7.3.2/7.3.3/7.3.4/7.3.5/7.3.6. It has been rated as critical. This impacts an unknown function of the component MSS Integration Cartridge. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2016-1181. The attack may be initiated remotely. There is no... Weiterlesen

CVE-2016-1182 | Oracle Real-Time Decision Server 3.2.1 Platform Installation input validation (Nessus ID 106299 / ID 371195)

Fri, 16 Oct 2026 03:49:20 +0200

A vulnerability classified as critical has been found in Oracle Real-Time Decision Server 3.2.1. The affected element is an unknown function of the component Platform Installation. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CVE-2016-1182. It is possible to initiate the attack remotely. There... Weiterlesen

CVE-2016-1182 | Oracle Adaptive Access Manager 11.1.1.7.0/11.1.2.3.0 OAAM Server input validation (Nessus ID 106299 / ID 371195)

Fri, 16 Oct 2026 03:49:20 +0200

A vulnerability marked as critical has been reported in Oracle Adaptive Access Manager 11.1.1.7.0/11.1.2.3.0. This issue affects some unknown processing of the component OAAM Server. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2016-1182. The attack is possible to be carried out remotely. No exploit... Weiterlesen

CVE-2016-1182 | Oracle Communications Performance Intelligence Center (PIC) Software Apache Struts 1 input validation (Nessus ID 106299 / ID 371195)

Fri, 16 Oct 2026 03:49:20 +0200

A vulnerability categorized as critical has been discovered in Oracle Communications Performance Intelligence Center (PIC) Software up to 10.1.x. Affected by this vulnerability is an unknown functionality of the component Apache Struts 1. Such manipulation leads to improper input validation. This vulnerability is listed as CVE-2016-1182. The... Weiterlesen

CVE-2016-1182 | Oracle Primavera P6 Enterprise Project Portfolio Management Web Access input validation (Nessus ID 106299 / ID 371195)

Fri, 16 Oct 2026 03:49:20 +0200

A vulnerability, which was classified as critical, has been found in Oracle Primavera P6 Enterprise Project Portfolio Management up to 16.2. Affected is an unknown function of the component Web Access. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2016-1182. The attack is possible to be carried out... Weiterlesen

CVE-2016-1182 | Oracle WebCenter Portal 11.1.1.9.0/12.2.1.2.0/12.2.1.3.0 Apache Struts 1 input validation (Nessus ID 92234 / ID 371195)

Fri, 16 Oct 2026 03:49:19 +0200

A vulnerability, which was classified as critical, was found in Oracle WebCenter Portal 11.1.1.9.0/12.2.1.2.0/12.2.1.3.0. This vulnerability affects unknown code of the component Apache Struts 1. Such manipulation leads to improper input validation. This vulnerability is documented as CVE-2016-1182. The attack can be executed remotely. There is... Weiterlesen

CVE-2016-1181 | Oracle Retail Clearance Optimization Engine 14.0.5 Dataset memory corruption (ID 87288 / BID-91068)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability, which was classified as critical, was found in Oracle Retail Clearance Optimization Engine 14.0.5. This affects an unknown function of the component Dataset Component. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2016-1181. The attack may be performed from remote. There is no available... Weiterlesen

CVE-2016-1181 | Oracle Retail Order Management System 5.0 Apache Struts 1 memory corruption (Nessus ID 99528 / ID 87288)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability described as critical has been identified in Oracle Retail Order Management System 5.0. The affected element is an unknown function of the component Apache Struts 1. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2016-1181. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2016-1181 | Oracle Hospitality Reporting/Analytics 9.0.0 Configuration memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability described as critical has been identified in Oracle Hospitality Reporting and Analytics 9.0.0. This affects an unknown part of the component Configuration. The manipulation results in memory corruption. This vulnerability was named CVE-2016-1181. The attack may be performed from remote. In addition, an exploit is available.... Weiterlesen

CVE-2016-1181 | Oracle Communications Policy Management 12.1/12.2/12.3/12.4 Apache Struts 1 Local Privilege Escalation (ID 371195 / BID-96729)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability labeled as critical has been found in Oracle Communications Policy Management 12.1/12.2/12.3/12.4. This issue affects some unknown processing of the component Apache Struts 1. The manipulation results in Local Privilege Escalation. This vulnerability is known as CVE-2016-1181. It is possible to launch the attack remotely. No... Weiterlesen

CVE-2016-1181 | Oracle Communications WebRTC Session Controller up to 7.1 Apache Struts 1 memory corruption (Nessus ID 99528 / ID 371195)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability classified as critical has been found in Oracle Communications WebRTC Session Controller up to 7.1. Affected by this issue is some unknown functionality of the component Apache Struts 1. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2016-1181. The attack can be initiated remotely.... Weiterlesen

CVE-2016-1181 | Oracle Communications Converged Application Server up to 7.0.0.0 Apache Struts 1 memory corruption (Nessus ID 99528 / ID 371195)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability marked as critical has been reported in Oracle Communications Converged Application Server up to 7.0.0.0. Affected is an unknown function of the component Apache Struts 1. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2016-1181. It is possible to initiate the attack remotely.... Weiterlesen

CVE-2016-1181 | Oracle Agile Recipe Management for Pharmaceuticals 9.3.4 UI Components-Framework memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability was found in Oracle Agile Recipe Management for Pharmaceuticals 9.3.4. It has been declared as critical. The impacted element is an unknown function of the component UI Components-Framework. Executing a manipulation can lead to memory corruption. This vulnerability is handled as CVE-2016-1181. The attack can be executed remotely.... Weiterlesen

CVE-2016-1181 | Oracle Transportation Management 6.2/6.3.7/6.4.1 Install memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability was found in Oracle Transportation Management 6.2/6.3.7/6.4.1. It has been rated as critical. This affects an unknown function of the component Install. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2016-1181. The attack is possible to be carried out remotely. Moreover, an exploit is... Weiterlesen

CVE-2016-1181 | Oracle MICROS XBR 7.0.2/7.0.4 Retail memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability was found in Oracle MICROS XBR 7.0.2/7.0.4. It has been rated as critical. Affected is an unknown function of the component Retail. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2016-1181. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Upgrading the... Weiterlesen

CVE-2016-1181 | Oracle Hospitality Reporting/Analytics 9.0.0 Report memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 23:56:11 +0200

A vulnerability classified as critical has been found in Oracle Hospitality Reporting and Analytics 9.0.0. This vulnerability affects unknown code of the component Report. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2016-1181. It is possible to initiate the attack remotely. Furthermore, there is an... Weiterlesen

CVE-2016-1181 | Oracle Hospitality Gift/Loyalty 9.0.0 iCard.net memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability labeled as critical has been found in Oracle Hospitality Gift and Loyalty 9.0.0. Affected by this vulnerability is an unknown functionality of the component iCard.net. Executing a manipulation can lead to memory corruption. This vulnerability is handled as CVE-2016-1181. The attack can be executed remotely. Additionally, an exploit... Weiterlesen

CVE-2016-1181 | Oracle Hospitality Gift/Loyalty 9.0.0 Report memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability identified as critical has been detected in Oracle Hospitality Gift and Loyalty 9.0.0. Affected is an unknown function of the component Report. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2016-1181. Remote exploitation of the attack is possible. Furthermore, an exploit is available.... Weiterlesen

CVE-2016-1181 | Oracle Enterprise Manager for Fusion Middleware 12.1.0.5 FMW Plugin for CC memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability, which was classified as critical, has been found in Oracle Enterprise Manager for Fusion Middleware 12.1.0.5. This vulnerability affects unknown code of the component FMW Plugin for CC. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2016-1181. It is possible to initiate the attack remotely.... Weiterlesen

CVE-2016-1181 | Oracle Identity Manager 11.1.2.3.0 Apache Struts 1 memory corruption (Nessus ID 92234 / ID 371195)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability was found in Oracle Identity Manager 11.1.2.3.0 and classified as critical. This impacts an unknown function of the component Apache Struts 1. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2016-1181. The attack may be launched remotely. There is no exploit available. It is suggested to... Weiterlesen

CVE-2016-1181 | Oracle Application Testing Suite 12.5.0.2/12.5.0.3 Installation memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability was found in Oracle Application Testing Suite 12.5.0.2/12.5.0.3. It has been rated as critical. This affects an unknown part of the component Installation. This manipulation causes memory corruption. This vulnerability is handled as CVE-2016-1181. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the... Weiterlesen

CVE-2016-1181 | Oracle Retail Invoice Matching up to 14.1 memory corruption (EDB-41570 / Nessus ID 99528)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability, which was classified as critical, has been found in Oracle Retail Invoice Matching up to 14.1. The impacted element is an unknown function. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2016-1181. The attack can only be executed locally. Furthermore, there is an exploit available. It... Weiterlesen

CVE-2016-1181 | Oracle WebLogic Server up to 12.2.1.2 Samples memory corruption (Nessus ID 99528 / ID 371195)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability was found in Oracle WebLogic Server 10.3.6.0/12.1.3.0/12.2.1.0/12.2.1.1/12.2.1.2. It has been declared as critical. Affected by this issue is some unknown functionality of the component Samples. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2016-1181. It is possible to launch the attack... Weiterlesen

CVE-2016-1181 | Oracle JD Edwards EnterpriseOne Tools 9.1 Web Runtime SEC memory corruption (Nessus ID 92292 / ID 371195)

Thu, 15 Oct 2026 22:51:42 +0200

A vulnerability described as critical has been identified in Oracle JD Edwards EnterpriseOne Tools 9.1. This affects an unknown part of the component Web Runtime SEC. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2016-1181. It is possible to launch the attack remotely. No exploit is available. Upgrading the... Weiterlesen

CVE-2016-0466 | Oracle Java SE 6u105/7u91/8u66 JAXP denial of service (Nessus ID 88060 / ID 350055)