Unauthenticated network attackers can read critical data and make limited unauthorized changes in Oracle Agile Product Lifecycle Management for Process 6.2.4 through the Product Quality Management component. The flaw is remotely reachable over HTTP with low attack complexity, no credentials, and no user interaction, yielding high confidentiality impact and low integrity impact; availability is not affected. No public exploit code or CISA KEV entry was identified at time of analysis, so this is a high-priority patch item rather than a confirmed active exploitation event.
Oracle Outside In Technology 8.5.8, specifically the Outside In Clean Content SDK, can be compromised by a crafted document delivered over HTTP, enabling an unauthenticated remote attacker to create, delete, or modify critical data and read a limited subset of accessible data when a victim opens, uploads, or triggers conversion of the malicious file. The scope-change rating means exploitation can affect host applications and other products that embed the SDK, not just Outside In itself, although mandatory user interaction prevents unattended mass exploitation. No public exploit code or CISA KEV entry was identified at time of analysis, so this is a credible mid-to-high priority issue rather than an emergency.
Unauthenticated network attackers can access critical data and make limited unauthorized changes in Oracle Agile Product Lifecycle Management for Process 6.2.4 through the Product Quality Management component, yielding a CVSS 3.1 score of 8.2 with high confidentiality and low integrity impact. The CVSS vector indicates network reachability to the HTTP interface with no credentials, user interaction, or special configuration required, though real-world risk depends on whether the application is internet-facing or only reachable from trusted internal networks. No public exploit identified at time of analysis; this is a credible mid-to-high priority for organizations running the affected version.
Unauthenticated network attackers can access critical data and perform limited data modification in Oracle Siebel CRM End User versions 17.0 through 26.9 via the Communications Panel/Dashboard component. The vulnerability is easily exploitable (CVSS 8.2, AV:N/AC:L/PR:N/UI:N) and requires only HTTP reachability to the Siebel web tier. No public exploit code or active exploitation has been identified at time of analysis, but internet- or intranet-exposed deployments should prioritize patching.
The Advantech ADAM-3600 intelligent remote I/O module exposes a proprietary management protocol in which the SafeEnhancement protection feature fails to enforce login lockout or rate limiting, so remote attackers can repeatedly guess the administrator password until it is recovered even with the hardening option turned on. Successful guessing yields high-impact confidentiality, integrity, and availability loss on the device (CVSS 3.1 base 8.2, AV:N/AC:H/PR:N/UI:N), although exploitation is gated by attack complexity: the adversary must reach the device's protocol port and correctly implement that proprietary protocol, and the outcome depends on administrator password strength and available attack time. The issue is reported by Singapore's CSA, affects ADAM-3600 units per the wildcard CPE, and has no confirmed CISA KEV listing or public exploit code - no public exploit identified at time of analysis - with no EPSS score supplied in the available intelligence.
Crafted-document processing in Oracle Outside In Technology 8.5.8 can let a remote unauthenticated attacker access or alter sensitive data when a victim opens or processes a malicious file in an application that embeds the Outside In Clean Content SDK. The CVSS 8.2 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N, so HTTP delivery needs no credentials but exploitation depends on victim-side parsing, and the scope change means the real impact tracks the privileges of the host product. No public exploit was identified at time of analysis, and no KEV entry is indicated.
Compromise of JD Edwards EnterpriseOne Tools 9.2.0.0 through 9.2.26.5 allows unauthenticated attackers on the adjacent network segment to read critical data and make limited unauthorized modifications through the Monitoring and Diagnostics SEC component. The CVSS 8.2 severity reflects no credentials or user interaction and a scope change that can affect connected products, but exploitation requires Layer 2 adjacency rather than public-network reachability; no public exploit identified at time of analysis.
Local compromise of Oracle Concurrent Processing in Oracle E-Business Suite 12.2.3 through 12.2.15 requires an attacker who already has high-privilege logon access to the infrastructure where the component runs, but successful exploitation can take over Concurrent Processing and, through scope change, significantly impact additional EBS products. The issue is context-dependent and moderate priority rather than a mass-exploitation threat; no public exploit was identified at time of analysis, and exploitation is not remotely or anonymously reachable.
A stack-based buffer overflow in the web management interface of certain ASUS router models allows an attacker positioned on the adjacent network segment (LAN or Wi-Fi) who already holds high-privilege administrative credentials to corrupt device operations and cause a denial of service by sending an HTTP request containing an input field longer than the expected length. The 8.2 CVSS 4.0 score reflects high integrity and availability impact, but confidentiality is unaffected and the preconditions are substantial: no internet-facing exposure and no unauthenticated path, since the required admin session is already sufficient to reboot or reconfigure the device. No public exploit code or confirmed active exploitation was identified at time of analysis, and the advisory does not enumerate the specific affected models or firmware builds.
Denial of service in libexpat 2.7.2 through 2.9.0 lets a remote attacker render a reused XML parser permanently unusable for subsequent documents: XML_ParserReset() clears the direct byte counter but never offsets the tracked heap allocations (m_alloc_tracker.bytesAllocated) accumulated by the previous document, so a large XML document followed by a reset causes the next document on that parser to fail with XML_ERROR_NO_MEMORY until the parser object is destroyed and recreated. Only services that keep one parser alive across documents via XML_ParserReset() and link an XML_GE==1 build (the default) are affected; applications that allocate a fresh parser per document are not. Exploitation requires a non-default reuse pattern (assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H), impact is limited to availability with no confidentiality or integrity loss, and no public exploit code or in-the-wild activity was identified at time of analysis; a vendor fix exists in upstream PR #1431.
Hard-coded cryptographic key in IBM Guardium Data Protection 12.1 and 12.2 means the same static key ships inside every installation, so an attacker who reverse-engineers the product and recovers that key can decrypt (and potentially forge) the data it protects across any deployment. The assessed vector (AV:N/AC:H/PR:N/UI:N) rates this High complexity rather than trivially exploitable, because the attacker must both extract the key and gain access to the ciphertext it guards, and the independent assessment scopes the realistic impact to confidentiality loss rather than integrity or availability. No public exploit code and no CISA KEV listing were identified at time of analysis, and no EPSS score was supplied; the issue is serious but not a top-tier emergency.
Authenticated low-privileged users of Oracle JD Edwards EnterpriseOne Tools 9.2.0.0 through 9.2.26.5 can abuse the Package Build SEC component over HTTP to create, delete, or modify critical application data and to hang or repeatedly crash the Tools service, yielding a combined integrity and availability impact rated CVSS 8.1. Exploitation requires only a valid low-tier account (PR:L), with low attack complexity, no user interaction, and no elevated privileges, so the practical barrier is account provisioning plus reachability of the EnterpriseOne Tools web layer rather than any exploit precondition. At the time of analysis no public exploit code or confirmed active exploitation was identified, and no CISA KEV listing exists for this CVE.
Unauthenticated remote takeover of the Oracle Application Object Library Core component is possible in Oracle E-Business Suite 12.2.3 through 12.2.15 over HTTP, carrying a CVSS 3.1 base score of 8.1 for full confidentiality, integrity and availability impact. Oracle characterizes the flaw as difficult to exploit (AC:H), meaning the attacker must satisfy preconditions outside their direct control rather than sending a single reliable request, but no privileges or user interaction are needed once those conditions are met. No public exploit code has been identified at time of analysis and the issue has not been confirmed actively exploited (no CISA KEV entry); EPSS scoring was not provided, so prioritization should rest on the high impact of a full AOL compromise combined with the exposure of internet-facing EBS web tiers.
Unauthenticated network attackers can achieve full takeover of the Oracle Call Center Technology component in Oracle E-Business Suite 12.2.3 through 12.2.15 by reaching its RMI-based Internal Operations service. Oracle rates exploitation as difficult (AC:H) because success depends on server-side conditions outside the attacker's control, but a successful attack yields complete confidentiality, integrity, and availability loss. No public exploit code or CISA KEV entry was identified at time of analysis, and real-world risk is driven mainly by whether the RMI ports are reachable from untrusted networks.
Takeover of Trusted Answer Search 26.1 is possible for unauthenticated network attackers who can reach a vulnerable PL/SQL package over Oracle Net, with full confidentiality, integrity, and availability impact on success. The flaw is difficult to exploit because success depends on a condition outside the attacker's control, and only version 26.1 is listed as affected. No public exploit code or confirmed active exploitation was identified at time of analysis.
Low-privileged, network-reachable attackers can corrupt or destroy data and repeatedly crash Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 through the Report Distribution component exposed over HTTP. Successful exploitation yields high integrity and availability impact - unauthorized creation, deletion or modification of critical PeopleTools data plus hang or repeatable crash conditions approaching complete denial of service - while confidentiality is unaffected (CVSS 3.1 base 8.1, AV:N/AC:L/PR:L/UI:N/C:N/I:H/A:H). Exploitation is not unauthenticated: a valid low-privileged account is required, so the realistic threat is insiders or attackers who already hold credentials and can reach the report distribution surface; no public exploit code was identified at time of analysis and the issue is not in CISA KEV.
Authenticated low-privilege users can read and modify critical data in Oracle Mobile Field Service, part of Oracle E-Business Suite 12.2.3-12.2.15, through the Admin UI over HTTP. The CVSS 8.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) confirms network reachability, low attack complexity, and no user interaction, but it is not pre-authentication because a valid low-privilege account is required. No public exploit identified at time of analysis and the CVE is not in CISA KEV.
Unauthenticated network attackers can potentially take over Oracle Access Manager 12.2.1.4.0 and 14.1.2.0.0 through crafted SAML authentication exchanges, yielding high confidentiality, integrity, and availability impact. The flaw is rated CVSS 3.1 8.1 with AC:H, indicating exploitation is difficult and depends on specialized conditions in the SAML flow; no public exploit or CISA KEV status is identified in the provided data, and SAML must be configured and reachable for exposure.
MySQL Connector/J 26.7.0 can be fully compromised - confidentiality, integrity and availability - when a Java application using the driver processes a crafted or attacker-controlled response from the MySQL server endpoint it connects to, giving the attacker a path to take over the connector. Oracle scores this 8.1 but rates attack complexity High despite PR:N/UI:N, reflecting that the realistic precondition is attacker control of, or man-in-the-middle position on, the database endpoint rather than a direct hit on an internet-facing listener. No public exploit code and no CISA KEV entry were identified at time of analysis, and only version 26.7.0 is listed as affected, so upgrading removes exposure.
Unauthenticated network attackers can achieve takeover of JD Edwards EnterpriseOne Tools 9.2.0.0 through 9.2.26.4 by exploiting a high-complexity flaw in the Installation Security component exposed over HTTP. Oracle rates the issue 8.1 with full confidentiality, integrity, and availability impact, but characterizes exploitation as difficult because additional conditions beyond the attacker's control must be met; no public exploit identified at time of analysis, and no CISA KEV entry was provided. Exposure is greatest where the Tools HTTP interface is broadly reachable.
Unauthenticated network attackers can achieve full takeover of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0 through 9.2.26.5) by reaching the SMTP mail-handling path of the Enterprise Infrastructure SEC component, as disclosed in Oracle's October 2026 Critical Patch Update. Oracle rates the flaw 8.1 with high confidentiality, integrity, and availability impact, but attack complexity is high (AC:H), meaning success depends on message-processing state or timing the attacker does not fully control, so reliable exploitation is non-trivial. No public exploit code or CISA KEV listing was identified at time of analysis, and no EPSS score was supplied, so this should be treated as a serious-but-not-emergency patching priority rather than an active incident.
Unauthenticated network attackers can potentially take over Oracle Shipping Execution in Oracle E-Business Suite 12.2.3 through 12.2.15 by abusing a high-complexity flaw in the Workflow Events component, rated CVSS 8.1 with full confidentiality, integrity, and availability impact. Oracle characterizes the issue as difficult to exploit (AC:H), meaning success depends on conditions outside the attacker's control such as precise timing, server state, or a specific configuration rather than reliable reproduction against any default install, and no public exploit code or active exploitation has been identified at time of analysis. Practical risk is further bounded by exposure: the EBS HTTP interface and the Shipping Execution module must be network-reachable to the attacker, which in many deployments means internal-only rather than internet-facing access.
Unauthenticated, network-reachable attackers can potentially take over MySQL Server and MySQL Cluster through a high-complexity flaw in the 'Client programs' component, with full confidentiality, integrity, and availability impact. The issue affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1 plus MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1; Oracle rates it difficult to exploit (AC:H) and no public exploit identified at time of analysis.
Takeover of Oracle MySQL Server and MySQL Cluster can result when a client program connects to an attacker-controlled, rogue, or intercepted MySQL endpoint, exploiting a difficult-to-trigger flaw in the client programs component. Affected releases include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, plus MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. Oracle rates it CVSS 8.1 with high confidentiality, integrity, and availability impact; the vector requires network access with no privileges, and high attack complexity reflects the need for server impersonation or interception, with no public exploit identified at time of analysis.
Oracle MySQL Server and MySQL Cluster client programs (MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1; MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1) harbor a high-complexity flaw that an unauthenticated network attacker can use to achieve full confidentiality, integrity and availability impact on a MySQL client, amounting to takeover in the assessed scope. Exploitation is constrained because the victim client must connect to an attacker-controlled or attacker-influenced server endpoint over one of the supported protocols, and Oracle rates the issue 'difficult to exploit' (AC:H). No public exploit was identified at time of analysis and no CISA KEV entry is present; CVSS 3.1 base score is 8.1.
Oracle Agile PLM for Process 6.2.4 can be taken over through its Product Quality Management component by unauthenticated remote HTTP requests, but the exploit path is rated high complexity and difficult rather than reliably repeatable. Oracle's October 2026 Critical Patch Update lists the issue with full confidentiality, integrity, and availability impact and no CWE mapping, and no public exploit or CISA KEV entry was identified in the provided intelligence at time of analysis. The combination of network reachability, no privileges or user interaction, and takeover-level impact makes this a high-impact but condition-dependent risk for supply-chain quality environments.
Unauthenticated network attackers can achieve full takeover of Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 through the Business Interlink component, though the high attack complexity - Oracle characterizes the flaw as 'difficult to exploit' - means success depends on conditions beyond the attacker's control, which materially reduces real-world exploitability. The vulnerability carries a CVSS 3.1 base score of 8.1 with complete confidentiality, integrity, and availability impact; no public exploit was identified at time of analysis. This is a genuinely serious but not top-tier-urgent issue, and risk concentrates on internet-exposed PeopleSoft portals where Business Interlink is reachable or in active use.
Unauthenticated network attackers can achieve full takeover of Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 by targeting the Business Interlink component over HTTP, with high impact across confidentiality, integrity, and availability. Oracle rates the flaw as 'difficult to exploit' (CVSS 8.1, AC:H), meaning success hinges on conditions outside the attacker's control such as the specific configuration state or timing of the Business Interlink service, so this is a serious but conditional risk rather than an emergency. No public exploit code or confirmed active exploitation has been identified at time of analysis, and exploitation realistically depends on whether Business Interlink is enabled and reachable from untrusted networks.
JD Edwards EnterpriseOne Tools (versions 9.2.0.0 through 9.2.26.5) allows a low-privileged authenticated attacker with HTTP network access to read and modify critical data through a flaw in the Enterprise Infrastructure SEC component, according to Oracle's October 2026 Critical Patch Update. The CVSS 3.1 score is 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), with high confidentiality and integrity impact and no availability impact. No public exploit code or active exploitation has been identified at time of analysis, though the "Authentication Bypass" tag conflicts with the PR:L vector and should be confirmed with Oracle.
Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC) versions 9.2.0.0 through 9.2.26.5 allows a low-privileged authenticated attacker with network access to JDENET to create, delete, or modify critical data and read all data accessible to the application. The CVSS 3.1 score is 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N); no public exploit code or CISA KEV confirmation was identified at time of analysis. Despite an 'Authentication Bypass' tag, the assessed vector requires valid low-privileged credentials, making this a credible high-priority patch target but not a confirmed emergency.
Oracle E-Business Suite 12.2.3 through 12.2.15 ships a Contract Lifecycle Management for Public Sector module whose Award/PO component fails to properly constrain what a logged-in low-privileged user can do, so any account holder with HTTP reach to the application can read and alter contract and purchase-order data they should not touch. The result is a CVSS 3.1 score of 8.1 with high confidentiality and integrity impact and no availability impact; the vector (AV:N/AC:L/PR:L/UI:N/S:U) means exploitation requires prior authentication but no admin rights, no user interaction and no special configuration. Risk is concentrated in EBS deployments with large or loosely governed user populations, or where credentials can be phished or reused; no public exploit code or confirmed active exploitation was identified at time of analysis, and Oracle has published a fix in its October 2026 Critical Patch Update.
Oracle Quality in Oracle E-Business Suite 12.2.3 through 12.2.15 allows an authenticated low-privileged remote attacker to read and modify critical data through the Internal Operations component over HTTP. The flaw is low complexity and requires no user interaction, but valid EBS credentials are required, which limits anonymous exploitation; confidentiality and integrity are fully impacted while availability is not. No public exploit code or CISA KEV entry was identified at time of analysis.
Low-privileged users of Oracle Communications BRM - Elastic Charging Engine 15.2.0.0.0 can read and alter critical charging data through a flaw in the product's Security component reachable over TLS. The issue scores CVSS 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N): Oracle rates it easily exploitable once a low-privilege foothold exists, with high confidentiality and integrity impact and no availability impact. No public exploit code or confirmed active exploitation has been identified at time of analysis, and Oracle addresses the flaw in its October 2026 Critical Patch Update.
Unauthenticated attackers can tamper with critical data and cause a complete, repeatable denial of service in Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 by targeting the Report Distribution component over HTTP, but only if a legitimate user is induced to interact with the attack. The CVSS 3.1 score is 8.1 with high integrity and availability impact and no confidentiality impact. No public exploit identified at time of analysis, and the risk is high-priority but not an active-exploitation emergency.
Unauthenticated attackers with network reach to Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 can potentially achieve full takeover of the platform through the BI Foundation component over HTTP, with high impact across confidentiality, integrity and availability (CVSS 3.1 base 8.1). The high attack complexity reflects Oracle's own 'difficult to exploit' classification, meaning success hinges on timing, state or environmental preconditions outside the attacker's direct control rather than a single reliable request. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, so practical risk is gated primarily by whether the BI HTTP interface is exposed to untrusted networks.
Compromise of Oracle EBS Workflow 12.2.3 through 12.2.15 is possible for unauthenticated network attackers via HTTP, with successful exploitation yielding high confidentiality, integrity, and availability impact and takeover of the Workflow component. The flaw is rated CVSS 8.1 but is difficult to exploit (AC:H), meaning success depends on a server condition or timing window the attacker cannot fully control. No public exploit code or CISA KEV active-exploitation signal is present at time of analysis, so exposure is primarily a function of whether Workflow Notification Mailer HTTP endpoints are reachable from untrusted networks.
Oracle Database Server in versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3 lets an authenticated low-privileged user who holds the Create Table privilege subvert the Virtual Private Database (VPD) row-level security feature over Oracle Net, gaining unauthorized read, creation, modification, and deletion access to data those VPD policies are supposed to protect. Successful exploitation yields high confidentiality and integrity impact (CVSS 3.1 base 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) with no user interaction required; the attacker must already have a valid database account and network reachability to the database listener. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS score was supplied in the source data, so the practical risk is concentrated in environments where low-privilege accounts are routinely granted Create Table.
Authentication bypass in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC) lets a low-privileged attacker with network access over HTTP read and modify critical application data in versions 9.2.0.0 through 9.2.26.5. Exploitation requires a valid low-privileged account (PR:L), no user interaction, and low attack complexity, with high confidentiality and integrity impact but no availability impact. The provided intelligence identifies no public exploit code and no confirmed active exploitation; internet-exposed EnterpriseOne web tiers are the highest-risk deployments.
Successful exploitation of Oracle Essbase 21.8.3.0.0 could allow a remote, unauthenticated attacker with TCP network access to take over the Essbase service, with high confidentiality, integrity, and availability impact. Oracle rates the issue difficult to exploit (CVSS 8.1, AC:H), and the specific precondition is not disclosed; no public exploit was identified at time of analysis. Realistic exposure depends heavily on whether the Essbase TCP listener is reachable from untrusted networks.
Unauthenticated network attackers can achieve full takeover of Oracle Essbase 21.8.3.0.0 by reaching the product's WebLogic T3 and/or IIOP remoting listeners, with complete confidentiality, integrity, and availability impact (CVSS 3.1 base 8.1, C:H/I:H/A:H). The flaw sits in the Security component and is rated difficult to exploit (AC:H), meaning the attacker must satisfy conditions outside their direct control beyond simply reaching the port; no user interaction is required (PR:N/UI:N). There is no public exploit code and no confirmed active exploitation at time of analysis, but exposure is real wherever T3/IIOP is reachable from untrusted networks - the October 2026 Oracle Critical Patch Update is the only fix path identified in the available data.
Unauthenticated attackers positioned on the same network segment as an Oracle JD Edwards EnterpriseOne Tools host can read and tamper with protected data through the Enterprise Infrastructure SEC component in supported releases 9.2.0.0 through 9.2.26.5. The flaw scores CVSS 3.1 base 8.1 (AV:A/AC:L/PR:N/UI:N/C:H/I:H/A:N): once an attacker has layer-2 adjacency to the EnterpriseOne hardware, no credentials, user interaction, or special conditions are required, and the result is full loss of confidentiality and integrity of EnterpriseOne-accessible data with no availability impact. No public exploit code or confirmed active exploitation was identified at time of analysis, so the practical risk is driven less by exploit maturity than by whether an organization exposes its EnterpriseOne host segment to untrusted or flat internal networks.
Unauthenticated read access to the complete contents of prefixed system databases is possible in Apache CouchDB 3.5.2 and earlier because chttpd fails to enforce authorization on an API endpoint that serves those databases. Only deployments that have renamed their system databases with a prefix (a configuration the vendor calls 'very rare') are exposed - instances using the default _users and _replicator names are not exploitable - but where that condition holds, a remote attacker with network reach to the HTTP API can dump user credential documents or replication definitions without credentials or user interaction. Our assessment rates confidentiality impact as high with no integrity or availability effect, and no public exploit code or CISA KEV entry was identified at the time of analysis.
Server-side request forgery in Kroxylicious's Azure Key Vault KMS provider lets an attacker who can influence wire-deserialized EDEK bytes redirect the proxy's Azure bearer token to a host they control, then replay that token against the real Key Vault to break the record-encryption trust model. The issue affects Red Hat Streams for Apache Kafka 3 deployments only when record encryption is enabled with the Azure Key Vault provider, and the CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) reflects the need for low-privileged influence over EDEK input plus a reachable attacker-controlled host. No public exploit code has been identified at time of analysis, and no CISA KEV entry confirms active exploitation.
Authenticated low-privileged users can achieve full takeover of Oracle Agile Product Lifecycle Management for Process 6.2.4 through the Product Quality Management component, but only if a separate, typically higher-privileged victim is induced to interact with attacker-supplied content over HTTP. Rated CVSS 3.1 8.0 (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), the flaw yields high confidentiality, integrity, and availability impact once the interaction occurs. The dual precondition of valid credentials plus a second user's action confines this to targeted, social-engineering-style attacks against authenticated deployments rather than opportunistic internet-wide scanning; no public exploit code has been identified at time of analysis.
Adjacent-network attackers can achieve takeover of Oracle Management Pack for Oracle GoldenGate (EM Plugin) versions 13.4.1.0.1 through 13.5.2.0.6, with high confidentiality, integrity, and availability impact, provided they can reach the communication segment attached to the host and a legitimate operator performs a required interaction. No authentication is required and attack complexity is low, but the AV:A and UI:R requirements sharply limit exposure compared with an internet-reachable flaw. The supplied intelligence contains no public exploit code and no CISA KEV entry, so there is no public exploit identified at time of analysis.
Unauthenticated attackers positioned on the physical communication segment attached to the hardware running Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.9) can exploit the Siebel Cloud Manager component to obtain complete read and write access to critical application data, with scope change extending the impact to additional products. The CVSS 3.1 base score is 8.0 (AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N): no credentials or user interaction are needed, but the High attack complexity and the requirement to already reside on the adjacent/local network segment substantially constrain real-world exposure, and availability is not affected. No public exploit code was identified at time of analysis and the flaw is not listed in CISA KEV, so the practical risk is concentrated in environments where untrusted parties can reach the Siebel Cloud Manager host's local segment.
OS command injection in virtualenv 20.26.6 through 21.14.2 lets an attacker who controls the environment's destination path or the --prompt value smuggle shell metacharacters into generated activation scripts. Because the template engine substitutes placeholders one key at a time over the whole template, a path or prompt containing the literal text __VIRTUAL_NAME__, __VIRTUAL_ENV__, or __VIRTUAL_PROMPT__ gets rewritten again during a later pass, and the later value's quoting can close the earlier literal and execute the remaining path when a victim activates the environment with bash, fish, xonsh, or activate_this.py. Per the CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H this is a local, low-complexity issue requiring no attacker privileges but mandatory victim interaction, yielding full confidentiality, integrity, and availability impact; no public exploit code or CISA KEV entry was identified at time of analysis, and the vendor-released fix is version 21.14.2.
Command injection in virtualenv's activation script allows an attacker who controls the virtual environment name (directory name, the --prompt argument, or the VIRTUALENV_PROMPT variable) to execute arbitrary commands in a victim's zsh shell each time the prompt is redrawn. Affected are virtualenv releases prior to 21.14.4; from 21.13.0 through 21.14.3 the PS1 escaping logic only ran when BASH_VERSION was set, leaving zsh with the raw, unescaped prompt value, and earlier releases left the environment name unescaped entirely. Exploitation requires a zsh interactive shell with the PROMPT_SUBST option enabled and a local victim activating the crafted environment (CVSS 3.1 7.8, AV:L/UI:R/PR:N), so unauthenticated remote exploitation is not possible; bash and default zsh configurations without PROMPT_SUBST are not affected, and no public exploit has been identified at time of analysis.
Command injection in virtualenv's fish-shell activator allows an attacker who controls the environment directory path, the --prompt argument, or the VIRTUALENV_PROMPT variable to escape the single-quoted fish literal in the generated activate.fish and execute arbitrary commands when the victim sources that file. All virtualenv releases prior to 21.14.2 that emit a fish activator are affected; bash, zsh and other activators are not. Exploitation requires local user interaction (sourcing the file) and a crafted value containing a backslash immediately before a quote, so this is a conditionally gated local code-injection flaw rather than a remotely reachable issue; no public exploit code or CISA KEV entry was identified at time of analysis, and the vendor-released fix is version 21.14.2.
Local privilege escalation in Apple macOS Sequoia before 15.8 and Tahoe before 26.7 allows an app already running on the host to gain elevated privileges, rated CVSS 3.1 7.8 (CWE-269, Improper Privilege Management). Exploitation requires local code execution as an unprivileged app (AV:L, PR:L) and no user interaction; it is not remotely reachable and patched systems are unaffected. No public exploit code or CISA KEV entry was identified at time of analysis.