CVE-2020-2699

CVE-2020-2699 affects Oracle FLEXCUBE Universal Banking (component: Infrastructure). Vulnerable versions: 12.0.1–12.4.0 and 14.0.0–14.3.0. Low-privileged attacker with network access via HTTP can compromise Oracle FLEXCUBE Universal Banking, potentially leading to unauthorized access to critical ...

CVE-2020-2690

CVE-2020-2690 affects Oracle VM VirtualBox (Core) with updates before 5.2.36, 6.0.16, and 6.1.2. The issue allows a low-privileged, local attacker with logon to the infrastructure where VirtualBox runs to compromise the VirtualBox environment, potentially leading to unauthorized access to confide...

CVE-2020-2699

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2689

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2676

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Printing. The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

CVE-2020-2665

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2678

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-2675

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Login. The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

CVE-2020-2672

CVE-2020-2672 affects Oracle E-Business Suite’s Oracle Email Center (component: Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable by an unauthenticated attacker with network access over HTTPS and requires user interaction from a person other...

CVE-2020-2678

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-2658

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2644

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...

CVE-2020-2655

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this...

CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2663

CVE-2020-2663 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) in versions 8.56 and 8.57. An unauthenticated attacker with network access over HTTP can compromise PeopleSoft PeopleTools; exploitation requires user interaction. Impact includes unauthorized updates/inserts/del...

CVE-2020-2652

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2655

CVE-2020-2655 affects Oracle Java SE JSSE in Java 11.0.5 and 13.0.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to potentially update/insert/delete or read data in Java SE, with the attack surface tied to sandboxed Java Web Start/Applet deployments and API...

CVE-2020-2651

CVE-2020-2651 affects Oracle E-Business Suite's Oracle CRM Technical Foundation (component: Preferences). Concrete affected versions are 12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation, with...

CVE-2020-2658

CVE-2020-2658 concerns Oracle E-Business Suite’s Oracle iSupport component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise iSupport, with exploitation requiring human interaction from a user ...

CVE-2020-2662

CVE-2020-2662 affects Oracle E-Business Suite, specifically the Oracle iSupport component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The issue is exploitable by an unauthenticated attacker over HTTPS with network access, and exploitation requires human interaction by another user. Th...