Oracle Utilities Applications: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Utilities Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-40628 linked CVEs
Open advisory with all CVEs
More on Applications
Other advisories
- Not ratedosv:CLEANSTART-2024-WG50644<code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt
- Not ratedosv:CLEANSTART-2026-TK78512Twisted is an event-based framework for internet applications, supporting Python 3
- Not ratedosv:CLEANSTART-2025-JI09385ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications
- Not ratedosv:CLEANSTART-2026-UF88766Alertmanager handles alerts sent by client applications such as the Prometheus server
- Not ratedosv:CLEANSTART-2026-SL84472AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses
- Not ratedosv:CLEANSTART-2026-SV32355Twisted is an event-based framework for internet applications, supporting Python 3
- Not ratedosv:CLEANSTART-2026-UF19432Twisted is an event-based framework for internet applications, supporting Python 3
- Not ratedosv:CLEANSTART-2026-TI45715Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Other news entries
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them MovingNewsThe Hacker News
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- 3 Ways AI Agents Already Operate in Your BrowserNewsBleepingComputer
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 MillionNewsSecurityWeek
- Fake ChatGPT, Claude apps spread malware via signed AI binariesNewsCSO Online
- When prevention fails: Why cyber resilience is the next big test of trustNewsCSO Online
- Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offlineBreachpwn.watch
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4062
ID