CVE-2020-14610: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2020-3867

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.9 Description: The issue is related to insufficient input validation in the Popups component of the Oracle Applications Framework. It allows an unauthenticated attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle E-Business Suite Applications Framework

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...

PT-2020-3541

Name of the Vulnerable Software and Affected Versions Oracle Applications Framework versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Page Request component of the Oracle Applications Framework. This can be exploited by a remote...

CVE-2020-14534: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

PT-2020-3462

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.9 Description The issue is related to the Attachments / File Upload component of the Oracle Applications Framework product. It allows a low-privileged attacker with network access via HTTP to compromise th...

The vulnerability of the sub-component “Attachments/File Upload” in Oracle Applications Framework of the Oracle E-Business Suite allows a perpetrator to modify data.

The vulnerability of the Attachments/File Upload sub-component in Oracle Applications Framework of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete dat...

The vulnerability of the Diagnostics component of the Oracle Applications Framework software, a part of the Oracle E-Business Suite, allows an intruder to access, modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Diagnostics component of the Oracle Applications Framework, a part of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2866

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2890

The CVE-2020-2890 entry concerns Oracle E-Business Suite’s Oracle Applications Framework (Diagnostics). Affected are 12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated remote attacker, over HTTP, to compromise the Oracle Applications Framework. Attacks require human interaction and can ...

CVE-2020-2866: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2020-2189

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing an unauthenticated attacker with...

CVE-2020-2890: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

The vulnerability of the Attachments/File Upload component of the Oracle Applications Framework allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Attachments/File Upload component of the Oracle Applications Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTPS protocol...

The vulnerability of the Attachments/File Upload component in the Oracle Applications Framework allows a perpetrator to gain unauthorized access to modify, add, or delete data.

The vulnerability of the Attachments/File Upload component in the Oracle Applications Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data using the HTTPS...

Oracle E-Business Suite Multiple Vulnerabilities (Jan 2020 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2020 Oracle Critical Patch Update CPU. It is, as noted in the January 2020 Critical Patch Update advisory, affected by flaws in the following components : - Oracle Human Resources - Oracle CRM Technical Foundatio...