CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2020-14542

Vulnerability in the Oracle Solaris product of Oracle Systems component: libsuri. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to create, delete,...

Unspecified Vulnerability in Oracle Java SE JSSE Component (CNVD-2020-72708)

Oracle Java SE is a for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the JSSE component in Oracle Java SE versions 11.0.6 and 14. An attacker could exploit the vulnerability to gain unauthoriz...

CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2766

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2764

Vulnerability in the Java SE product of Oracle Java SE component: Advanced Management Console. The supported version that is affected is Java Advanced Management Console: 2.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2020-2546

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.6 and 14 Description The issue is related to insufficient access control in the JSSE component of Java SE, allowing an unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks can...

The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Elastic Search component of the Oracle PeopleSoft products allows a perpetrator to gain access to data for reading purposes.

The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Elastic Search component of the Oracle PeopleSoft products lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain read access to data through HTTP requests...

Oracle Retail Customer Management and Segmentation Foundation Unauthorized Access Vulnerability (CNVD-2020-05110)

Oracle Retail Customer Management and Segmentation Foundation is a retail customer management product. A security vulnerability exists in the Security component of Oracle Retail Customer Management and Segmentation Foundation 18.0. An attacker could exploit the vulnerability to cause unauthorized...

DEBIAN-CVE-2020-2655

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this...

CVE-2020-2559

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: UIF Open UI. Supported versions that are affected are 19.7 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attack...

PT-2020-1330 · Oracle · Oracle Flexcube Investor Servicing

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0 Description: The issue is related to inadequate access controls in the Infrastructure component of Oracle...

CVE-2019-3012

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: BI Platform Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2019-2951

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37216)

Java SE is short for Java Platform Standard Edition, for the development and deployment of desktop, server, and embedded devices and real-time environment of Java applications. Java SE Embedded is based on Java SE, and provides specific features and support for embedded systems. An unspecified...

CVE-2019-2835

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2756

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2727

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite subcomponent: Load Testing for Web Apps. The supported version that is affected is 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2712

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...