Oracle - CVE CyberSecurity Database News (Page 44)

Oct 21, 2022 Oracle

CVE-2022-3640 A critical vulnerability was found in the Linux Kernel. The affected function is l2cap_conn_del of the component Bluetooth. The vulnerability leads to use after free.

Another critical issue was found in AIX. It is a vulnerability related to unauthorized program execution. Affected is the function radvd. The vulnerability is due

Oct 18, 2022 CSRF Exploit Java Oracle

CVE-2022-21631 - JD Edwards EnterpriseOne Tools Design Tools SEC Vulnerability Explained

CVE-2022-21631 is a serious vulnerability in Oracle's JD Edwards EnterpriseOne Tools, specifically within the Design Tools SEC component. This flaw exists

Oct 18, 2022 CSRF Oracle

CVE-2022-39411 Oracle Transportation Management is affected by a vulnerability in versions 6.4.3 and 6.5.1.

603 CVE-2017-32316 352 CSRF 2018-05-15 2018-06-15 604 A remote code execution vulnerability in OCM Remote Control allows an attacker

Oct 18, 2022 Java Oracle

CVE-2022-39399 An issue was discovered in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE. The vulnerability could be exploited to execute arbitrary code.

code installed by an administrator). Unpatched clients, servers and end users can be compromised by this issue. Furthermore, for an application to be vulnerable, it

Oct 18, 2022 Java Oracle

CVE-2022-21636 The Oracle Applications Framework is affected by a vulnerability in versions 12.2.6-12.2.11. Versions earlier than 12.2.6 are not affected.

Due to insecure session management, an attacker can hijack user session and perform any action on behalf of the victim. Risk of escalated privileges (ROP)