CVE-2020-14876

Removed by vendor...

CVE-2020-14858

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14870

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14876

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14857

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14862

CVE-2020-14862 affects Oracle E‑Business Suite Universal Work Queue (Internal Operations) with affected versions 12.2.3–12.2.9. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle Universal Work Queue and can lead to takeover of the component, ...

CVE-2020-14875

Oracle E-Business Suite Oracle Marketing Administration is affected by CVE-2020-14875. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker over HTTP to compromise Oracle Marketing, with potential for unauthorized creation, deletion or modifica...

CVE-2020-14865

Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection product of Oracle PeopleSoft component: eSupplier Connection. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2020-14873

Removed by vendor...

CVE-2020-14867

Removed by vendor...

CVE-2020-14870

Removed by vendor...

CVE-2020-14858

CVE-2020-14858 affects Oracle Hospitality OPERA 5 Property Services (Logging) for versions 5.5 and 5.6. The vulnerability is described as enabling a high-privileged attacker with network access over HTTP to compromise the service, with exploitation requiring a user interaction from someone other ...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14865

CVE-2020-14865 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM eSupplier Connection component in version 9.2 . The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the eSupplier Connection, leading to potential unauthorized creation, d...

CVE-2020-14857

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14861

CVE-2020-14861 affects Oracle MySQL Server (Server: Optimizer) in versions 8.0.21 and earlier. The vulnerability allows a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server, per the description. The i...

CVE-2020-14876

CVE-2020-14876 affects Oracle E-Business Suite – Trade Management (UI). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access via HTTP can compromise Trade Management, potentially creating, deleting or modifying data or gaining unauthorized data acce...

CVE-2020-14870

CVE-2020-14870 affects Oracle MySQL Server (Server: X Plugin) with affected versions 8.0.21 and earlier. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (Denial of Service). Public advisories reference MySQL-related fixes and upgrades...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...