Everything Firewall Chronicle has reported about Critical Vulnerability: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Oracle SOA Suite allows network-based attackers to seize full control of the application without credentials, affecting two specific versions.
An unauthenticated network-based vulnerability in Oracle’s Identity Manager Connector allows full data manipulation via the LDAP Gateway component.
A critical security flaw in Oracle Essbase allows network attackers to access and alter data without credentials, posing a severe risk to exposed environments.
A critical flaw in WhaTicket Community allows attackers to register as administrators without credentials, exposing tickets and settings.