[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 423546
> CVE-2025-50091 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50090 [MEDIUM 5.4]
[PUBLISHED: 2025-07-15] [EPSS 0.17%]
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2025-50089 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2025-50088 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50087 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.52%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50086 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.64%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to com...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50085 [MEDIUM 5.5]
[PUBLISHED: 2025-07-15] [EPSS 0.52%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50084 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.64%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50083 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.66%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50082 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.66%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50081 [LOW 3.1]
[PUBLISHED: 2025-07-15] [EPSS 0.30%]
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50080 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compro...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50079 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50078 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.66%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Ser...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50077 [MEDIUM 4.9]
[PUBLISHED: 2025-07-15] [EPSS 0.69%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2025-50076 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.63%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of th...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2025-50073 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.33%]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Or...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2025-50072 [MEDIUM 4.0]
[PUBLISHED: 2025-07-15] [EPSS 0.18%]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebLogic...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2025-50071 [MEDIUM 6.4]
[PUBLISHED: 2025-07-15] [EPSS 0.28%]
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications F...
AFFECTED_PRODUCTS: Oracle Applications Framework
> CVE-2025-50070 [MEDIUM 5.3]
[PUBLISHED: 2025-07-15] [EPSS 0.14%]
Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 23.4-23.8. Difficult to exploit vulnerability allows low privileged attacker having Authenticated OS User privilege with logon to the infrastructure where JDBC executes to compromise JDBC. Succe...
AFFECTED_PRODUCTS: Oracle Database Server
> CVE-2025-50069 [HIGH 7.7]
[PUBLISHED: 2025-07-15] [EPSS 0.38%]
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.27 and 21.3-21.18. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise J...
AFFECTED_PRODUCTS: Oracle Java Virtual Machine, Oracle Java Virtual Machine
> CVE-2025-50068 [MEDIUM 6.7]
[PUBLISHED: 2025-07-15] [EPSS 0.19%]
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster execut...
AFFECTED_PRODUCTS: Oracle Mysql Cluster, Oracle Mysql Cluster, Oracle Mysql Cluster
> CVE-2025-50067 [CRITICAL 9.0]
[PUBLISHED: 2025-07-15] [EPSS 0.34%]
Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions that are affected are 24.2.4 and 24.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. Successful att...
AFFECTED_PRODUCTS: Oracle Application Express, Oracle Application Express
> CVE-2025-50066 [LOW 2.7]
[PUBLISHED: 2025-07-15] [EPSS 0.30%]
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. Supported versions that are affected are 19.3-19.27, 21.3-21.18 and 23.4-23.8. Easily exploitable vulnerability allows high privileged attacker having Execute on DBMS_REDEFINITION privilege with network acc...
AFFECTED_PRODUCTS: Oracle Database Server, Oracle Database Server, Oracle Database Server
> CVE-2025-50065 [LOW 3.7]
[PUBLISHED: 2025-07-15] [EPSS 0.35%]
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). The supported version that is affected is Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM fo...
AFFECTED_PRODUCTS: Oracle Graalvm For Jdk
> CVE-2025-50064 [MEDIUM 4.8]
[PUBLISHED: 2025-07-15] [EPSS 0.30%]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebL...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2025-50063 [HIGH 7.3]
[PUBLISHED: 2025-07-15] [EPSS 0.29%]
Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks re...
AFFECTED_PRODUCTS: Oracle Jre, Oracle Jdk
> CVE-2025-50062 [HIGH 8.1]
[PUBLISHED: 2025-07-15] [EPSS 0.31%]
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2.51 and 9.2.52. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Hcm Global Payroll Core, Oracle Peoplesoft Enterprise Hcm Global Payroll Core
> CVE-2025-50061 [MEDIUM 5.4]
[PUBLISHED: 2025-07-15] [EPSS 0.22%]
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 20.12.0-20.12.21, 21.12.0-21.12.21, 22.12.0-22.12.19, 23.12.0-23.12.13 and 24.12.0-24.12.4. Easily exploitable...
AFFECTED_PRODUCTS: Oracle Primavera P6 Enterprise Project Portfolio Management, Oracle Primavera P6 Enterprise Project Portfolio Management, Oracle Primavera P6 Enterprise Project Portfolio Management ... (+2)
> CVE-2025-50060 [HIGH 8.1]
[PUBLISHED: 2025-07-15] [EPSS 0.32%]
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher...
AFFECTED_PRODUCTS: Oracle Bi Publisher, Oracle Bi Publisher, Oracle Bi Publisher
> CVE-2025-50059 [HIGH 8.6]
[PUBLISHED: 2025-07-15] [EPSS 0.62%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0....
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8 ... (+19)
> CVE-2025-49830 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.61%]
Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the f...
AFFECTED_PRODUCTS: Cyberark Conjur, Cyberark Conjur, Cyberark Conjur
> CVE-2025-49829 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.45%]
Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur E...
AFFECTED_PRODUCTS: Cyberark Conjur, Cyberark Conjur, Cyberark Conjur
> CVE-2025-49828 [HIGH 8.8]
[PUBLISHED: 2025-07-15] [EPSS 2.24%]
Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secret...
AFFECTED_PRODUCTS: Cyberark Conjur, Cyberark Conjur
> CVE-2025-49827 [CRITICAL 9.8]
[PUBLISHED: 2025-07-15] [EPSS 1.45%]
Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulat...
AFFECTED_PRODUCTS: Cyberark Conjur, Cyberark Conjur
> CVE-2025-30762 [HIGH 7.5]
[PUBLISHED: 2025-07-15] [EPSS 0.46%]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2025-30760 [MEDIUM 5.4]
[PUBLISHED: 2025-07-15] [EPSS 0.25%]
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...
AFFECTED_PRODUCTS: Oracle Jd Edwards Enterpriseone Tools
> CVE-2025-30759 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.26%]
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...
AFFECTED_PRODUCTS: Oracle Business Intelligence, Oracle Business Intelligence, Oracle Business Intelligence
> CVE-2025-30758 [MEDIUM 5.3]
[PUBLISHED: 2025-07-15] [EPSS 0.36%]
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...
AFFECTED_PRODUCTS: Oracle Siebel Crm Deployment
> CVE-2025-30756 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.14%]
Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction fr...
AFFECTED_PRODUCTS: Oracle Rest Data Services
> CVE-2025-30754 [MEDIUM 4.8]
[PUBLISHED: 2025-07-15] [EPSS 0.48%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0...
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8 ... (+34)
> CVE-2025-30753 [MEDIUM 6.5]
[PUBLISHED: 2025-07-15] [EPSS 0.44%]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLo...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2025-30752 [LOW 3.7]
[PUBLISHED: 2025-07-15] [EPSS 0.67%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
AFFECTED_PRODUCTS: Oracle Jre, Oracle Jdk, Oracle Graalvm For Jdk
> CVE-2025-30751 [HIGH 8.8]
[PUBLISHED: 2025-07-15] [EPSS 0.40%]
Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromis...
AFFECTED_PRODUCTS: Oracle Database Server, Oracle Database Server
> CVE-2025-30750 [LOW 2.4]
[PUBLISHED: 2025-07-15] [EPSS 0.27%]
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.27, 21.3-21.18 and 23.4-23.8. Easily exploitable vulnerability allows high privileged attacker having Create User privilege with network access via Oracle Net to compromise Unif...
AFFECTED_PRODUCTS: Oracle Database Server, Oracle Database Server, Oracle Database Server
> CVE-2025-30749 [HIGH 8.1]
[PUBLISHED: 2025-07-15] [EPSS 1.27%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1...
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8 ... (+34)
> CVE-2025-30748 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.26%]
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools
> CVE-2025-30747 [MEDIUM 4.3]
[PUBLISHED: 2025-07-15] [EPSS 0.31%]
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools
> CVE-2025-30746 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.19%]
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks r...
AFFECTED_PRODUCTS: Oracle Istore
> CVE-2025-30745 [MEDIUM 6.1]
[PUBLISHED: 2025-07-15] [EPSS 0.19%]
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
AFFECTED_PRODUCTS: Oracle Mes For Process Manufacturing, Oracle Mes For Process Manufacturing