CVE-2020-2971

CVE-2020-2971 affects Oracle Application Express within Oracle Database Server (versions 5.1–19.2). The vulnerability allows a low-privileged attacker with SQL Workshop privilege and network access via HTTP to compromise APEX. Attacks require human interaction, and the impact can include unauthor...

Unspecified Vulnerability in Oracle Database Server Java VM Component (CNVD-2020-44296)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

Unspecified Vulnerability in Oracle Database Server Data Pump Component

Oracle Database Server is an object-relational database management system that provides an open, comprehensive, and integrated approach to information management.Data Pump is the data and metadata migration component. A security vulnerability exists in the Data Pump component in Oracle Database...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44293)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44290)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44291)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

CVE-2020-2513: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2976: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2971: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2969: Undefined Security Weakness

Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to...

CVE-2020-2978

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracl...

CVE-2020-2978

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracl...

CVE-2020-2978: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracl...

CVE-2020-2973: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2975: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2972: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

PT-2020-3247

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue exists due to insufficient input validation in the Oracle Application Express component of Oracle Database Server. Exploitation of this issue may allow a remote attacke...

PT-2020-3249

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...

PT-2020-3244

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...

PT-2020-3243

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with a valid user...