Vuldb Updates

A vulnerability marked as critical has been reported in Oracle Business Intelligence Enterprise Edition 5.9.0.0.0/6.4.0.0.0. The affected element is an unknown function of the component Majel Mobile Service. This manipulation causes denial of service. The identification of this vulnerability is CVE-2022-25647. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as critical has been found in Oracle WebLogic Server 14.1.1.0.0. This affects an unknown function of the component Samples. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2022-25647. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Oracle Blockchain Platform. It has been rated as critical. This vulnerability affects unknown code of the component BCS Console. Performing a manipulation results in denial of service. This vulnerability is reported as CVE-2022-25647. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Oracle Banking APIs up to 22.2. It has been declared as critical. Affected is an unknown function of the component IDM - Authentication. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2022-25647. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Oracle Banking Corporate Lending up to 14.7. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Core. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2022-25647. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical has been found in Oracle Banking Digital Experience up to 22.2. The affected element is an unknown function of the component UI General. The manipulation leads to denial of service. This vulnerability is listed as CVE-2022-25647. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as critical, was found in Oracle Banking Payments 14.5/14.6/14.7. This impacts an unknown function of the component Infrastructure. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2022-25647. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Oracle Banking Trade Finance 14.5/14.6/14.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Infrastructure. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2022-25647. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Oracle Banking Treasury Management 14.5/14.6/14.7. It has been declared as critical. This affects an unknown part of the component Infra Code. The manipulation results in denial of service. This vulnerability is known as CVE-2022-25647. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Oracle FLEXCUBE Universal Banking up to 14.7. It has been rated as critical. The affected element is an unknown function of the component Infrastructure. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2022-25647. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability classified as critical was found in Microsoft Malware Protection Engine. This impacts an unknown function. Such manipulation leads to link following. This vulnerability is listed as CVE-2026-41091. The attack must be carried out locally. In addition, an exploit is available.

A vulnerability was found in Keycloak on Red Hat. It has been declared as problematic. Impacted is an unknown function of the component URI Parser. Such manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2026-7504. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, was found in Keycloak on Red Hat. This issue affects some unknown processing of the file /login-actions/restart. The manipulation results in authentication bypass by spoofing. This vulnerability is reported as CVE-2026-7507. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in GitLab Community Edition and Enterprise Edition up to 18.9.6/18.10.5/18.11.2. This affects an unknown part of the component Email Notification Handler. This manipulation causes code injection. This vulnerability is registered as CVE-2025-12669. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability has been found in GitLab Community Edition and Enterprise Edition up to 18.9.6/18.10.5/18.11.2 and classified as problematic. The impacted element is an unknown function. The manipulation leads to access control check implemented after asset is accessed. This vulnerability is documented as CVE-2026-3607. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Qt up to 5.15.19/6.5.9/6.8.3/6.9.1. Impacted is an unknown function of the component OpenSSL TLS Backend. The manipulation results in uncontrolled search path. This vulnerability is cataloged as CVE-2025-14575. The attack must be initiated from a local position. There is no exploit available.

A vulnerability was found in Oracle Retail Customer Management and Segmentation Foundation 17.0/18.0/19.0. It has been rated as critical. This affects an unknown function of the component Security. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2022-25647. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as critical has been discovered in Oracle Retail EFTLink 20.0.1/21.0.0. This impacts an unknown function of the component Installation. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2022-25647. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Oracle Siebel Core-Automation up to 22.8. It has been rated as critical. This vulnerability affects unknown code of the component Keyword Automation. This manipulation causes denial of service. This vulnerability is tracked as CVE-2022-25647. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability identified as critical has been detected in Oracle Siebel Core-Common Components up to 22.8. Impacted is an unknown function of the component DISA. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2022-25647. It is possible to initiate the attack remotely. There is no exploit available.