Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04358)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-03222)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could use this vulnerability to gain unauthorized access to, update, insert...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04033)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamless integration of a management suite.Oracle Email Cent...

Multiple vulnerabilities fixed in MySQL

Oracle has fixed several vulnerabilities in the MySQL connector, MySQL server and MySQL client. By exploiting the vulnerabilities, a malicious person with access to the the network read or manipulate data in the database or cause a denial-of-service. Oracle released updates to fix the...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04363)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

PT-2020-1524 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description: The issue is related to insufficient access control in the WLS Core Components of Oracle WebLogic Server, allowing a high-privileged attacker with logon access to the...

CVE-2019-4651

IBM Jazz Reporting Service JRS 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962...

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.7.x, and 8.8.x. An attacker could exploit some of these vulnerabilities to modify data on an affected website. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review t...

The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the Oracle Net protoc...

The vulnerability of the Point of Sale software component for Oracle Retail Xstore Point of Service allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Point of Sale software component for Oracle Retail Xstore Point of Service is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the Oracle Net protoc...

The vulnerability of the Portal sub-component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Portal subcomponent of the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

The vulnerability of the Mobile Service sub-component of the BI Publisher (formerly XML Publisher) software platform from Oracle Fusion Middleware allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Mobile Service sub-component of the BI Publisher formerly XML Publisher software platform from Oracle Fusion Middleware is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...

The vulnerability of the Fluid Core sub-component of the PeopleSoft Enterprise PeopleTools business application package from Oracle PeopleSoft Enterprise allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Fluid Core sub-component of the PeopleSoft Enterprise PeopleTools business application package from Oracle PeopleSoft Enterprise is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read,...

The vulnerability of the Libraries component of Java SE and Java SE Embedded software platforms allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read, modify, add, or delete data using various network...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or gain unauthorized access to...

The vulnerability of the Security Models component of the Oracle Hyperion Financial Reporting application allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Security Models component of the Oracle Hyperion Financial Reporting application for automating budget management processes is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain read, modify,...