CVE-2020-14604

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-14601

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-14601

CVE-2020-14601 describes a vulnerability in Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) affecting versions 8.0.6–8.1.0. An unauthenticated attacker can exploit over HTTP to access or modify Oracle FSA Infrastructure data, with read/write access to a...

CVE-2020-14606

CVE-2020-14606 affects Oracle SD-WAN Edge (Oracle Communications Applications) — component: User Interface. Affected versions are 8.2 and 9.0. The issue is exploitable by an unauthenticated attacker with network access over HTTP to compromise the appliance, potentially leading to takeover of Orac...

CVE-2020-14603

CVE-2020-14603 affects Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) in Oracle Financial Services Applications, Version 8.0.6–8.1.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to read restricted data due to a con...

CVE-2020-14590

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Page Request. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14590

CVE-2020-14590 is a vulnerability in Oracle E-Business Suite’s Oracle Applications Framework (OA Framework), specifically the Page Request component. Affected versions are 12.1.3 and 12.2.3–12.2.9. The issue allows a high-privilege attacker with network access over HTTP to read a subset of OA Fra...

CVE-2020-14580

CVE-2020-14580 affects Oracle Communications Session Border Controller (Oracle Communications Applications, component: System Admin) in versions 8.1.0, 8.2.0 and 8.3.0. The description indicates an easily exploitable vulnerability that allows a low-privilege attacker with network access via SSH t...

CVE-2020-14590

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Page Request. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14534

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

CVE-2020-14543

Technical details (affected product scope, root cause, exploitability and fixes) are not publicly available in the provided connected documents. Monitor for updates from vendor advisories and CVE feeds for confirmed remediation guidance.

CVE-2020-14534

The CVE-2020-14534 entry concerns Oracle E-Business Suite’s OA Framework (Popups) in version 12.2.9. A vulnerability allows an unauthenticated attacker who can reach Oracle Applications Framework over HTTP to compromise it, with human interaction required. The impact described includes potential ...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-44271)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...

Unspecified Vulnerability in Oracle Communications Applications Enterprise Session Border Controller

Oracle Communications Session Border Controller SBC helps service providers deliver trusted, carrier-grade, real-time communications. A security vulnerability exists in Oracle Communications Applications Enterprise Session Border Controller. An attacker could exploit the vulnerability to gain...

Unspecified Vulnerability in Oracle E-Business Suite Applications Framework

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...

Unspecified Vulnerability in Oracle Communications Applications Enterprise Communications

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in Oracle Communications Applications Enterprise Communications. An attacker could exploit the vulnerability to...

Graceful Logoff from a Published Application Renders the Session in Active State

Graceful logoffs from a published application launched in a seamless, fixed window, or as an RDP Initial Program, might result in the session not closing and the user being logged off. Sessions can be reset or exited correctly by manually resetting them, or by terminating remnant user processes i...

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

It is an open-source collection of pre-built vulnerable docker environments. The primary CVE ID is not explicitly mentioned, but the project is based on various vulnerabilities, including CVE-2016-9086, CVE-2013-4547, CVE-2017-1000353, and CVE-2018-1000006. The target product/service or framework...

PT-2020-19715 · Google · Google-Oauth-Client

Name of the Vulnerable Software and Affected Versions: com.google.oauth-client:google-oauth-client versions prior to 1.31.0 Description: The issue is related to the implementation of PKCE support for OAuth 2.0 in Native Apps, which does not follow the RFC. This allows an attacker to intercept the...

RIOT buffer overflow vulnerability

RIOT RIOT-OS is a set of operating systems for applications in the IoT field. A buffer error vulnerability exists in the base64 decoder in RIOT version 2020.04, which stems from the program not properly checking boundaries. A remote attacker can exploit this vulnerability to execute arbitrary cod...