Iuhrm

**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 **Description** An easily exploitable issue exists in the Oracle WebLogic Server Core component, allowing an unauthenticated attacker with logon to the infrastructure to compromise the server. Successful exploitation can lead to unauthorized modification, insertion, or deletion of data accessible by Oracle WebLogic Server. **Recommendations** Update Oracle WebLogic Server version 12.2.1.4.0 to a newer, fixed version. Update Oracle WebLogic Server version 14.1.1.0.0 to a newer, fixed version. Update Oracle WebLogic Server version 14.1.2.0.0 to a newer, fixed version.

**Name of the Vulnerable Software and Affected Versions** Oracle E-Business Suite versions 12.2.3 through 12.2.14 **Description** The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Application Object Library, resulting in unauthorized read access to a subset of accessible data. **Recommendations** For versions 12.2.3 through 12.2.14, update to a version that includes the fix for this issue to prevent unauthorized read access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Scripting versions 12.2.3 through 12.2.14 **Description** A vulnerability in the Oracle Scripting product of Oracle E-Business Suite, specifically in the iSurvey Module, allows an unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks can result in the takeover of Oracle Scripting. **Recommendations** For versions 12.2.3 through 12.2.14, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle E-Business Suite versions 12.2.3 through 12.2.14 **Description** The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Configurator, resulting in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. **Recommendations** For versions 12.2.3 through 12.2.14, update to a version that includes a fix for this issue to prevent unauthorized access to critical data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware Aria Operations for Logs (affected versions not specified) **Description** The issue is related to a deserialization vulnerability in VMware Aria Operations for Logs. A malicious actor with non-administrative access to the local system can trigger the deserialization of data, potentially resulting in authentication bypass. This could allow a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.