Lucene search
+L

2324 matches found

Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.9 views

CVE-2020-2720

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

5.4CVSS5.7AI score0.00814EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.37 views

CVE-2020-2707

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: WebAccess. Supported versions that are affected are 15.1.0.0-15.2.18.7, 16.1.0.0-16.2.19.0, 17.1.0.0-17.12.16.0, 18.1.0.0-18.8.16.0 and 19.12.0.0. Easily exploitable...

5.4CVSS5.2AI score0.0074EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.28 views

CVE-2020-2687

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

4.3CVSS3.7AI score0.01373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.23 views

CVE-2020-2684

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

6.5CVSS6.3AI score0.01321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.11 views

CVE-2020-2631

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Application Service Level Mgmt. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via...

6CVSS6.3AI score0.01159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.13 views

CVE-2020-2613

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Global EM Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

6CVSS6.3AI score0.01205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.4 views

CVE-2020-2620

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

6CVSS5.4AI score0.01159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.27 views

CVE-2020-2619

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

6CVSS5.5AI score0.01159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.9 views

CVE-2020-2619

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

6CVSS6.3AI score0.01159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.11 views

CVE-2020-2567

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Security. The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

4.8CVSS5.6AI score0.007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.12 views

CVE-2020-2576

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

6.5CVSS6.3AI score0.01248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:33 p.m.28 views

CVE-2020-2533

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS5.8AI score0.01035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:33 p.m.37 views

CVE-2020-2537

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

7.1CVSS6.6AI score0.01088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:33 p.m.8 views

CVE-2020-2533

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS6.3AI score0.01035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/01/14 12:0 a.m.19 views

PT-2020-1525 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server version 10.3.6.0.0 Description: The issue is related to insufficient access control in the WLS Core Components of Oracle WebLogic Server, allowing a high-privileged attacker with network access via HTTP to compromise th...

7.2CVSS6.7AI score0.01937EPSS
SaveExploits0References5
Prion
Prion
added 2019/11/22 4:15 p.m.22 views

Design/Logic Flaw

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage...

4CVSS6.3AI score0.00885EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/22 3:49 p.m.27 views

CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage...

6.4AI score0.00885EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.8 views

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Segment component of the Oracle Retail Customer Management and Segmentation Foundation software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.9CVSS6.8AI score0.01373EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2019/11/18 9:15 p.m.20 views

Code injection

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

6.5CVSS7.5AI score0.02385EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/18 9:15 p.m.23 views

CVE-2012-4438

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

8.8CVSS7.3AI score0.02385EPSS
SaveExploits0References3
Rows per page
Query Builder