Alberto Arganese

**Name of the Vulnerable Software and Affected Versions** Oracle Database Server versions 19.3 through 19.26 Oracle Database Server versions 21.3 through 21.17 Oracle Database Server versions 23.4 through 23.7 **Description** The issue is related to the XML Database component, allowing a low-privileged attacker with network access via HTTP to compromise the XML Database. Successful attacks require human interaction and can result in unauthorized update, insert, or delete access to some XML Database accessible data, as well as unauthorized read access to a subset of XML Database accessible data. **Recommendations** For versions 19.3 through 19.26, update to a version outside of this range to resolve the issue. For versions 21.3 through 21.17, update to a version outside of this range to resolve the issue. For versions 23.4 through 23.7, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the XML Database component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Workload Scheduler versions 9.5 through 10.2 **Description** The issue is related to the storage of passwords in plain text. This could allow an attacker to disclose protected information. A local user can read the user credentials stored in plain text. **Recommendations** For versions 9.5 through 10.2, update to a version that stores user credentials securely, avoiding plain text storage. As a temporary workaround, consider restricting access to the areas where credentials are stored to minimize the risk of exploitation.