Skip to content

Breaking

Oracle SOA Suite Critical Flaw in Fabric Layer Enables Remote System Takeover via HTTP
Oracle BPM Suite SOAP Vulnerability CVSS 9.9 Enables Remote Takeover in Versions 12.2 and 14.1
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Oracle SOA Suite Critical Flaw in Fabric Layer Enables Remote System Takeover via HTTP
Oracle BPM Suite SOAP Vulnerability CVSS 9.9 Enables Remote Takeover in Versions 12.2 and 14.1
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0

Oracle

Everything RedTeam Tribune has reported about Oracle: 2 stories, newest first. Part of our Cloud Security coverage.

22 Oct
Vulnerabilities

Oracle BPM Suite SOAP Vulnerability CVSS 9.9 Enables Remote Takeover in Versions 12.2 and 14.1

A CVSS 9.9 vulnerability in Oracle BPM Suite allows low-privileged attackers to seize control via SOAP, impacting versions 12.2.1.4.0 and 14.1.2.0.0.

11 Oct
Cloud Security

Oracle Fusion Claw AI runtime shifts ERP from aid to automation, raising lock-in fears

Oracle introduces a runtime to control AI execution in Fusion apps, aiming to move from assistance to automation while raising lock-in concerns.