CVE-2020-2591

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2020-2585

Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2020-2591

CVE-2020-2591 affects Oracle Web Applications Desktop Integrator (component: Application Service) in Oracle E-Business Suite, version 12.1.3. The CVSS 3.0 base score is 8.2 (HIGH) with network access required and user interaction, potentially leading to unauthorized read/write of data and broader...

CVE-2020-2566

CVE-2020-2566 affects Oracle E-Business Suite’s Oracle Applications Framework (Attachments / File Upload). Affected versions are 12.1.3 and 12.2.3–12.2.9. The flaw resides in the Oracle Applications Framework component handling file uploads, enabling an unauthenticated attacker with network acces...

CVE-2020-2569

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...

CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

CVE-2020-2569

CVE-2020-2569 concerns the Oracle Database Server, specifically the Oracle Applications DBA component. Affected are Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability is described as easily exploitable by a low-privileged attacker who already has Local L...

CVE-2020-2590

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Unspecified Vulnerability in Oracle Food and Beverage Applications Hospitality Suites Management

Oracle Food and Beverage Applications is the United States Oracle Oracle company's set of food and beverage sales management solutions. An unspecified vulnerability exists in Oracle Food and Beverage Applications Hospitality Suites Management. An attacker could use this vulnerability to gain...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04021)

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...

PT-2020-1394 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Analytical Applications Infrastructure versions 8.0.4 through 8.0.8 Description: The issue is related to a lack of protection for internal data in the Object Migration component of Oracle Financial Services Analytica...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Investor Servicing (CNVD-2020-09660)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Unspecified Vulnerability in Oracle Financial Services Applications Banking Corporate Lending (CNVD-2020-04375)

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The products include core banking, online banking, and property management.Oracle Banking Corporate Lending enables banks to adopt digital capabilities in credit management, origination,...

Unspecified Vulnerability in Oracle Financial Services Applications Banking Corporate Lending (CNVD-2020-04369)

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The products include core banking, online banking, and property management.Oracle Banking Corporate Lending enables banks to adopt digital capabilities in credit management, origination,...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications lies in insufficient encoding of user-input data, allowing attackers to execute malicious scripts.

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications is related to insufficient encoding of user-input data. Exploiting this vulnerability allows a malicious actor to execute malicious scripts remotely...

Unspecified Vulnerability in Oracle Financial Services Applications Banking Payments (CNVD-2020-04386)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in Oracle Financial...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04023)

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is a seamless integration of a management...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09958)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Applications DBA component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure

Oracle Financial Services Applications is a set of financial services software from Oracle. The product includes core banking, online banking and property management, etc. Financial Services Analytical Applications Infrastructure is one of the financial services analytical applications...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04020)

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...