Month: July 2023

Oracle Business Intelligence Enterprise Edition unspecified |

July 20, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Business...

Atlas Business Directory Listing cross-site scripting | CVE-2023-3755

July 20, 2023

NAME__________Atlas Business Directory Listing cross-site scriptingPlatforms Affected:Creativeitem Atlas Business Directory Listing 2.13Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Atlas Business Directory Listing is vulnerable...

HCL BigFix WebUI cross-site request forgery | CVE-2023-28023

July 20, 2023

NAME__________HCL BigFix WebUI cross-site request forgeryPlatforms Affected:HCL BigFix WebUIRisk Level:4.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HCL BigFix WebUI is vulnerable to cross-site request forgery,...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

July 20, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Oracle WebLogic Server unspecified | CVE-2023-22031

July 20, 2023

NAME__________Oracle WebLogic Server unspecifiedPlatforms Affected:Oracle WebLogic Server 14.1.1.0.0 Oracle WebLogic Server 12.2.1.4.0Risk Level:4.4Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle WebLogic Server...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:2.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to the...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.4Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

July 20, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Application Express unspecified | CVE-2023-21983

July 20, 2023

NAME__________Oracle Application Express unspecifiedPlatforms Affected:Oracle Application Express Administration 18.2 Oracle Application Express Administration 22.2Risk Level:5.6Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle...

HCL BigFix WebUI SQL injection | CVE-2023-28019

July 20, 2023

NAME__________HCL BigFix WebUI SQL injectionPlatforms Affected:HCL BigFix WebUIRisk Level:5.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________HCL BigFix WebUI is vulnerable to SQL injection. A remote...

Oracle MySQL Server unspecified |

July 20, 2023

Oracle Mobile Security Suite unspecified | CVE-2023-21994

July 20, 2023

NAME__________Oracle Mobile Security Suite unspecifiedPlatforms Affected:Oracle Mobile Security SuiteRisk Level:6.5Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle Mobile Security Suite related to...

Oracle MySQL Server unspecified |

July 20, 2023

Oracle Java SE unspecified | CVE-2023-22043

July 20, 2023

NAME__________Oracle Java SE unspecifiedPlatforms Affected:Oracle Java SE 8u371Risk Level:5.9Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle Java SE related to the JavaFX...

Oracle Business Intelligence Enterprise Edition unspecified |

July 20, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access...

Oracle Essbase unspecified | CVE-2023-22010

July 20, 2023

NAME__________Oracle Essbase unspecifiedPlatforms Affected:Oracle Essbase 21.4.3.0.0Risk Level:2.2Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle Essbase related to the Security and Provisioning component...

Oracle MySQL Server unspecified |

July 20, 2023

HCL BigFix WebUI open redirect | CVE-2023-28020

July 20, 2023

NAME__________HCL BigFix WebUI open redirectPlatforms Affected:HCL BigFix WebUIRisk Level:4.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HCL BigFix WebUI could allow a remote attacker to conduct...

Oracle MySQL Server unspecified |

July 20, 2023

Oracle Self-Service Human Resources unspecified | CVE-2023-22009

July 20, 2023

NAME__________Oracle Self-Service Human Resources unspecifiedPlatforms Affected:Oracle Self-Service Human Resources 12.2.3 Oracle Self-Service Human Resources 12.2.12Risk Level:4.3Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in...

Oracle Business Intelligence Enterprise Edition unspecified |

July 20, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:4.3Exploitability:UnprovenConsequences:Denial of...

Car Rental Script cross-site scripting | CVE-2023-3757

July 20, 2023

NAME__________Car Rental Script cross-site scriptingPlatforms Affected:GZ Scripts Car Rental PHP Script 1.8Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Car Rental Script is vulnerable to...

Oracle Hyperion Essbase Administration Services unspecified |

July 20, 2023

NAME__________Oracle Hyperion Essbase Administration Services unspecifiedPlatforms Affected:Oracle Hyperion Essbase Administration Services 21.4.3.0.0Risk Level:6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________An unspecified vulnerability in Oracle Hyperion...

Month: July 2023

Oracle Business Intelligence Enterprise Edition unspecified |

Atlas Business Directory Listing cross-site scripting | CVE-2023-3755

HCL BigFix WebUI cross-site request forgery | CVE-2023-28023

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

Oracle MySQL Server unspecified |

Oracle WebLogic Server unspecified | CVE-2023-22031

Oracle MySQL Server unspecified |

Oracle MySQL Server unspecified |

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

Oracle Application Express unspecified | CVE-2023-21983

HCL BigFix WebUI SQL injection | CVE-2023-28019

Oracle MySQL Server unspecified |

Oracle Mobile Security Suite unspecified | CVE-2023-21994

Oracle MySQL Server unspecified |

Oracle Java SE unspecified | CVE-2023-22043

Oracle Business Intelligence Enterprise Edition unspecified |

Oracle Essbase unspecified | CVE-2023-22010

Oracle MySQL Server unspecified |

HCL BigFix WebUI open redirect | CVE-2023-28020

Oracle MySQL Server unspecified |

Oracle Self-Service Human Resources unspecified | CVE-2023-22009

Oracle Business Intelligence Enterprise Edition unspecified |

Car Rental Script cross-site scripting | CVE-2023-3757

Oracle Hyperion Essbase Administration Services unspecified |

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Six Industrial Control Systems Advisories

You may have missed