Code injection

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Repository. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise...

CVE-2020-2722

Oracle FLEXCUBE Investor Servicing (Infrastructure) is affected in versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The issue relates to inadequate access controls, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized upd...

CVE-2020-2710

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-2667

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2644

CVE-2020-2644 affects Oracle Enterprise Manager Base Platform (Oracle Management Service) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high‑privileged attacker with network access via HTTP to compromise the Base Platform, potentially leading to unauthorized d...

CVE-2020-2661

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2626

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Cloud Control Manager - OMS. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTT...

CVE-2020-2632

CVE-2020-2632 affects Oracle Enterprise Manager Base Platform (System Monitoring). Public sources in the provided documents identify affected product and versions: 12.1.0.5, 13.2.0.0, and 13.3.0.0. The vulnerability is described as a high-privilege, network-accessible issue via HTTP that could al...

CVE-2020-2621

CVE-2020-2621 affects Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component. Publicly affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Base Platfor...

CVE-2020-2603

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Wireless. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Field...

CVE-2020-2600

CVE-2020-2600 affects Oracle PeopleSoft Enterprise PeopleTools (Elastic Search) with affected versions 8.56 and 8.57. The vulnerability allows an unauthenticated remote attacker, over HTTP, to access and potentially modify PeopleSoft data due to a flaw in the Elastic Search component; successful ...

CVE-2020-2585

Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2020-2602

CVE-2020-2602 affects Oracle PeopleSoft Enterprise PeopleTools Tree Manager in 8.56 and 8.57. The vulnerability allows network access via HTTP to an unauthenticated attacker who can cause unauthorized updates, inserts or deletes to sensitive data and unauthorized reads to a subset of data; the CV...

CVE-2020-2567

The CVE-2020-2567 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Security component) with affected version 18.0. The vulnerability is described as exploitable by a high-privilege attacker who can access over the network via HTTP; successful exploitation requires use...

CVE-2020-2537

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04370)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could use this vulnerability to gain unauthorized access to, update, insert...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04371)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04377)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04032)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamless integration of a management suite.Oracle Email Cent...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04031)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamless integration of a management suite.Oracle Email Cent...