PT-2020-1481

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access controls in the Host Management component of the Enterprise Manager Base Platform product. It allows a high-privileged...

PT-2020-1550

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. It allows an unauthenticat...

PT-2020-1426

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to a vulnerability in the Enterprise Manager Base Platform product, specifically in the Host Management component. This vulnerability can be easil...

PT-2020-1489

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to inadequate access control in the Enterprise Config Management component of the Enterprise Manager Base Platform product. It allows a...

PT-2020-1537

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c Description The issue is related to inadequate access control in the Database Gateway for ODBC component of Oracle Database Server. Exploitation of this issue may allow...

PT-2020-1539 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to a vulnerability in the Database Gateway for ODBC component, which can be exploited by a low-privileged attacker with Create Sessio...

PT-2020-1478

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Application Service Level Mgmt component. It allows a high-privileged attacker with network...

PT-2020-1480

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to the Extensibility Framework component and is caused by inadequate access control. It allows a high-privileged attacker with netwo...

PT-2020-1488

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Enterprise Config Management component of the Enterprise Manager Base Platform product. It allows a...

PT-2020-1498

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, and 13.3.0.0 Description The issue is related to inadequate access control in the Enterprise Config Management component. It allows a high-privileged attacker with network...

PT-2020-1535 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 Description: The issue is related to inadequate access control in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with networ...

PT-2020-1456

Name of the Vulnerable Software and Affected Versions Java SE versions 7u241, 8u231, 11.0.5, and 13.0.1 Java SE Embedded version 8u231 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded, resulting in a...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2020-1330)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.232.b09-0.48. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1330 advisory. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking...

OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Important: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network...

OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...