CVE-2019-2841

Affected product: Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions: 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0. External access over HTTP with low privileges could lead to unauthorized creation, d...

CVE-2019-2843

Vulnerability CVE-2019-2843 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent). Affected versions include 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The flaw allows a low-privileged attacker with network access via HTTP to compromise data: unauthorize...

CVE-2019-2845

CVE-2019-2845 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions: 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0. It is described as easily exploitable: a low-privileged attacker with network access...

CVE-2019-2846

CVE-2019-2846 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions include 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The vulnerability allows an unauthenticated attacker with network acce...

CVE-2019-2833

CVE-2019-2833 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications, with the 18.2.1 release identified as vulnerable. The flaw enables a low-privileged attacker who has Import/Export privileges and network access via HTTP to potentially compromise Simphony and gain una...

CVE-2019-2825

CVE-2019-2825 is a vulnerability in Oracle E-Business Suite’s Applications Manager (Diagnostics Interfaces). Affects Oracle E-Business Suite versions 12.1.3 and 12.2.3–12.2.8. The issue allows a high-privileged attacker with network access over HTTP to compromise Oracle Applications Manager, enab...

CVE-2019-2836

CVE-2019-2836 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications (affected version 18.2.1). An unauthenticated attacker with network access via HTTP can compromise Simphony, potentially gaining unauthorized access to critical data or complete access to all Oracle Hos...

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2823

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged attacker with networ...

CVE-2019-2823

The CVE-2019-2823 entry concerns Oracle Financial Services Applications Infrastructure (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 8.0.5–8.0.8. The vulnerability allows a low-privileged attacker who can access over HTTP via the network to cause ...

CVE-2019-2794

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2790

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2019-2781

Oracle Hospitality Suite8’s XML Interface contains a network-exposed vulnerability affecting versions 8.9.6, 8.10.2, and 8.11–8.14. The issue allows a low-privilege, network-attached attacker to access sensitive data within Oracle Hospitality Suite8. CVSS 3.0 base score is 6.5 with high confident...

CVE-2019-2763

CVE-2019-2763 affects Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications, with affected versions 9.0.0 and 9.1.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise data, granting unauthorized access to critical data...

CVE-2019-2750

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 12.1.0, 12.1.1, 12.1.2 and 13.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2750

The CVE-2019-2750 entry concerns the MICROS Retail-J component of Oracle Retail Applications (Internal Operations). Affected versions are 12.1.0, 12.1.1, 12.1.2 and 13.1. The vulnerability is exploitable over network via HTTP by an unauthenticated attacker and can lead to unauthorized data access...

CVE-2018-3316

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3316

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2883

CVE-2018-2883 affects Oracle Retail Xstore Office (subcomponent: Internal Operations) in Oracle Retail Applications, with affected versions 7.0 and 7.1. The vulnerability can be exploited by a low-privileged attacker over HTTP with network access; successful exploitation requires user interaction...