Advisories · Weakness
Privilege escalation.
Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.8 High
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Authentication bypass
- CVSS 8.8 High
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Broken access control
- CVSS 8.0 High
Improper access control in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Information disclosure
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Deserialization of untrusted data in Oracle Corporation Oracle Platform Security for Java
- Oracle Corporation Oracle Platform Security for Java
- Privilege escalation
- Broken access control
- CVSS 8.9 High
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
- Privilege escalation
<2.29.8 || >=2.30.0, <2.30.1 · fixed in 2.29.8, 2.30.1
GHSA-777w-rpr6-c52h · CVE-2026-65595 - CVSS 8.5 High
Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris
- Fujitsu Linux openFT
- Fujitsu Oracle Solaris openFT
- Privilege escalation
- CVSS 7.8 High
CVE-2026-14985
- Analog Way Picturall Quad Compact Mark II
- Path traversal
- Privilege escalation
- CVSS 7.5 High
Local Privilege Escalation in Gaia Portal
- checkpoint Quantum Security Gateway
- checkpoint Quantum Security Management
- Privilege escalation
- CVSS 4.0, no score published
Duplicate Advisory: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
- Privilege escalation
* · no fixed version yet
GHSA-wq64-hcrf-8m56 - CVSS 8.7 High
Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update
- grav
- Privilege escalation
- CVSS 6.6 Medium
Improper privilege management in Hikvision DS-2CD Series
- Hikvision DS-2CD Series
- Privilege escalation
- CVSS 8.8 High
Local Privilege Escalation in servereye client (sensorhub)
- servereye GmbH servereye Windows Agent (Sensorhub)
- Path traversal
- Privilege escalation
- CVSS 7.8 High
An issue in Unistal Systems Pvt.
- Privilege escalation
- CWE-782
- CVSS 7.8 High
An issue in Unistal Systems Pvt.
- Privilege escalation
- CWE-782
- CVSS 7.1 High
Improper access control in Oracle Corporation Oracle HRMS (US)
- Oracle Corporation Oracle HRMS (US)
- Information disclosure
- Privilege escalation
- CVSS 7.8 High
Improper privilege management in Oracle Corporation Oracle HRMS (US)
- Oracle Corporation Oracle HRMS (US)
- Privilege escalation
- CVSS 7.2 High
Improper privilege management in Oracle Corporation Oracle HRMS (US)
- Oracle Corporation Oracle HRMS (US)
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Privilege escalation
- Broken access control
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle Quality
- Oracle Corporation Oracle Quality
- Information disclosure
- Privilege escalation
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle HRMS (US)
- Oracle Corporation Oracle HRMS (US)
- Information disclosure
- Privilege escalation
- CVSS 7.6 High
Improper access control in Oracle Corporation Oracle Advanced Planning Command Center
- Oracle Corporation Oracle Advanced Planning Command Center
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Flow Manufacturing
- Oracle Corporation Oracle Flow Manufacturing
- Privilege escalation
- Authentication bypass
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Yard Management
- Oracle Corporation Oracle Yard Management
- Privilege escalation
- Authentication bypass
- CVSS 7.5 High
Missing authentication in Oracle Corporation Oracle Purchasing
- Oracle Corporation Oracle Purchasing
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Public Sector Financials
- Oracle Corporation Oracle Public Sector Financials
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Public Sector Payroll
- Oracle Corporation Oracle Public Sector Payroll
- Privilege escalation
- Broken access control
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle Lease and Finance Management
- Oracle Corporation Oracle Lease and Finance Management
- Privilege escalation
- Broken access control
- CVSS 8.3 High
Improper access control in Oracle Corporation Oracle Installed Base
- Oracle Corporation Oracle Installed Base
- Information disclosure
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Privilege escalation
- Broken access control
- CVSS 8.2 High
Improper access control in Oracle Corporation Oracle HRMS (UK)
- Oracle Corporation Oracle HRMS (UK)
- Privilege escalation
- Broken access control
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle HRMS (UK)
- Oracle Corporation Oracle HRMS (UK)
- Information disclosure
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Trade Management
- Oracle Corporation Oracle Trade Management
- Privilege escalation
- Broken access control
- CVSS 7.2 High
Improper privilege management in Oracle Corporation Oracle Lease and Finance Management
- Oracle Corporation Oracle Lease and Finance Management
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation TeleSales
- Oracle Corporation TeleSales
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Payables
- Oracle Corporation Oracle Payables
- Privilege escalation
- Authentication bypass
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Product Hub
- Oracle Corporation Oracle Product Hub
- Privilege escalation
- Authentication bypass
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle Price Protection
- Oracle Corporation Oracle Price Protection
- Information disclosure
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Privilege escalation
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
- Privilege escalation
- Broken access control
- CVSS 8.1 High
Missing authentication in Oracle Corporation Oracle Communications Converged Application Server
- Oracle Corporation Oracle Communications Converged Application Server
- Privilege escalation
- Authentication bypass
- CVSS 6.3 Medium
Improper access control in Oracle Corporation Oracle Payroll
- Oracle Corporation Oracle Payroll
- Information disclosure
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper privilege management in Oracle Corporation PeopleSoft In-Memory Project Discovery
- Oracle Corporation PeopleSoft In-Memory Project Discovery
- Privilege escalation
- CVSS 9.0 CriticalCritical · CVSS 9+
Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Program Management
- Oracle Corporation PeopleSoft Enterprise FIN Program Management
- Privilege escalation
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Missing authentication in Oracle Corporation PeopleSoft Enterprise FIN Expenses
- Oracle Corporation PeopleSoft Enterprise FIN Expenses
- Privilege escalation
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
Missing authentication in Oracle Corporation PeopleSoft Enterprise CRM Common Objects
- Oracle Corporation PeopleSoft Enterprise CRM Common Objects
- Privilege escalation
- Broken access control
- CVSS 7.5 High
Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Privilege escalation
- Authentication bypass
- CVSS 6.7 Medium
Improper privilege management in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Privilege escalation
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Privilege escalation
- Authentication bypass
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Privilege escalation
- Broken access control
- CVSS 6.7 Medium
Improper access control in Oracle Corporation Oracle Product Lifecycle Analytics
- Oracle Corporation Oracle Product Lifecycle Analytics
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Agile PLM
- Oracle Corporation Oracle Agile PLM
- Privilege escalation
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Missing authentication in Oracle Corporation Oracle Commerce Guided Search Platform Services
- Oracle Corporation Oracle Commerce Guided Search Platform Services
- Privilege escalation
- Authentication bypass
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Privilege escalation
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper access control in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Privilege escalation
- Broken access control
- CVSS 7.5 High
Missing authentication in Oracle Corporation Oracle Advanced Benefits
- Oracle Corporation Oracle Advanced Benefits
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Missing authentication in Oracle Corporation Oracle Communications Service Catalog and Design
- Oracle Corporation Oracle Communications Service Catalog and Design
- Privilege escalation
- Broken access control
- CVSS 7.8 High
Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Privilege escalation