CVE-2024-20984

CVE-2024-20984 affects Oracle MySQL Server (Server: Security: Firewall). Affected versions are 8.0.35 and earlier, and 8.2.0 and earlier. An attacker with network access via multiple protocols and high privileges can cause a hang or frequent crash (DoS) of MySQL Server. CVSS 3.1 base score 4.4 (a...

CVE-2024-20978

CVE-2024-20978 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL Server versions 8.0.35 and earlier, and 8.2.0 and earlier. Condition: remote, authenticated attacker with network access via multiple protocols can exploit a vulnerability in the Server: Optimizer to cause a hang or f...

CVE-2024-20978

Removed by vendor...

CVE-2024-20972

CVE-2024-20972 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.35 and prior and 8.2.0 and prior . The vulnerability is described as easily exploitable with a high-privilege attacker over network protocols, potentially causing a hang or frequent...

CVE-2024-20974

CVE-2024-20974 affects Oracle MySQL Server (Server: Optimizer). Affected: 8.0.35 and prior, 8.2.0 and prior. Vulnerability can enable a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS base score 4.9 (Availability). Connected IBM Gu...

CVE-2024-20968

Removed by vendor...

CVE-2024-20962

CVE-2024-20962 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.35 and earlier, and 8.2.0 and earlier. The vulnerability is exploitable over the network with low privileges via multiple protocols and can cause a hang or frequent crash (DoS) of MySQL Server. Th...

CVE-2024-20962

Removed by vendor...

CVE-2024-20958

CVE-2024-20958 affects Oracle E-Business Suite, specifically Oracle Installed Base (Engineering Change Order) in versions 12.2.3–12.2.13. The root cause is insufficient input validation in Engineering Change Order within Installed Base, enabling a low-privilege, network-accessible attacker to lev...

CVE-2024-20949

CVE-2024-20949 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result) in versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can exploit this after user interaction to perform unauthorized updates, inserts, deletes, and reads of data. A...

CVE-2024-20953

CVE-2024-20953 affects Oracle Agile PLM (Supply Chain) 9.3.6, specifically the Export component. The Nessus NASL notes this vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Oracle Agile PLM, with potential takeover and a CVSS v3.1 base score of 8.8 (C/H, ...

CVE-2024-20947

CVE-2024-20947 affects Oracle E-Business Suite, Oracle Common Applications (CRM User Management Framework) and impacts version 12.2.3–12.2.13. The vulnerability allows a low-privilege, network-access attacker (HTTP) to compromise Oracle Common Applications with user interaction required. Conseque...

CVE-2024-20941

The CVE-2024-20941 vulnerability affects Oracle E-Business Suite, specifically the Oracle Installed Base component (HTML UI) in versions 12.2.3–12.2.13. An unauthenticated attacker with network access over HTTP can potentially compromise Installed Base, with impacts including unauthorized update/...

CVE-2024-20939

CVE-2024-20939 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation Admin Console, with versions 12.2.3–12.2.13 vulnerable. The issue is an input validation/logic flaw that allows a low-privilege, network-accessible attacker via HTTP to cause a partial denial of servi...

CVE-2024-20931

CVE-2024-20931 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.1.0.0. The flaw, described across NVD/Red Hat/NCSC/CNNVD sources, enables an unauthenticated attacker with network access via T3 or IIOP to compromise the WebLogic server, p...

CVE-2024-20923

CVE-2024-20923 is a vulnerability affecting Oracle Java SE (JavaFX) and Oracle GraalVM Enterprise Edition (JavaFX component). Public details in connected advisories indicate affected versions: Oracle Java SE 8u391 and Oracle GraalVM Enterprise Edition 20.3.12 and 21.3.8. The issue is exploitable ...

CVE-2024-20927

CVE-2024-20927 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentially leading to unauthorized creation, deletion or mod...

CVE-2024-20919

CVE-2024-20919 affects Oracle Java SE and GraalVM family (Hotspot component). Affected: Oracle Java SE 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK 17.0.9, 21.0.1; GraalVM Enterprise 20.3.12, 21.3.8, 22.3.4. Vulnerability allows unauthenticated network access via multiple protocols...

CVE-2024-20915

CVE-2024-20915 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL), Login - SSO component. Affected: AOL in E-Business Suite versions 12.2.3–12.2.13. Issue: insufficient input validation in the Login - SSO path allows an unauthenticated, network-accessible attacker (via HTTP...

CVE-2024-20911

CVE-2024-20911 affects Oracle Audit Vault and Database Firewall (Firewall component) with affected versions 20.1–20.9. The vulnerability allows an attacker with network access via Oracle Net and high privileges to read a subset of data, requiring user interaction and potentially impacting additio...