CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2866

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2805

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

DEBIAN-CVE-2020-2778

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

CVE-2020-2746

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

Code injection

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Web Applications - InfoCenter. Supported versions that are affected are 8.6.0-8.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

Design/Logic Flaw

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

Buffer overflow

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Notes. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Design/Logic Flaw

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-2955

CVE-2020-2955 affects Oracle FLEXCUBE Core Banking, specifically the Transaction Processing component, in version 4.0. The vulnerability allows a low-privileged attacker with network access via HTTP to update, insert, or delete data and to read data, with a partial denial of service against FLEXC...

CVE-2020-2953

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2953

CVE-2020-2953 affects Oracle Retail Customer Management and Segmentation Foundation (Promotions) in Oracle Retail Applications, with affected version 18.0. The vulnerability allows unauthenticated, network-based access via HTTP that can lead to takeover of the foundation. The CVSS 3.0 base score ...

CVE-2020-2941

CVE-2020-2941 describes a vulnerability in the Oracle Financial Services Applications Funds Transfer Pricing product (UI component). Affected versions are 8.0.6 and 8.0.7. The issue allows a low-privilege attacker with network access via HTTP to compromise Funds Transfer Pricing, potentially enab...

CVE-2020-2936

CVE-2020-2936 affects Oracle Financial Services Balance Sheet Planning (Oracle Financial Services Applications), component: User Interface, with affected version 8.0.8. The vulnerability is described as easily exploitable: a low-privileged attacker with network access via HTTP can compromise data...

CVE-2020-2937

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-2939

CVE-2020-2939 affects Oracle Financial Services Asset Liability Management (ALM) UI in ALM 8.0.6 and 8.0.7. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise ALM, enabling unauthorized creation, deletion or modification of data, and unauthorized read acc...

CVE-2020-2931

Affected product: Oracle Knowledge Web Applications – InfoCenter. Vulnerable component: InfoCenter Web Applications; affected versions: 8.6.0–8.6.3. Root cause: unspecified in primary description, but vulnerability allows unauthenticated access over HTTP leading to takeover of Oracle Knowledge. I...