PT-2020-1520 · Oracle · Oracle Demantra Demand Management

Name of the Vulnerable Software and Affected Versions: Oracle Demantra Demand Management versions 12.2.4 through 12.2.5.1 Description: The issue is related to insufficient access control in the Security component of Oracle Demantra Demand Management, allowing a remote attacker to gain unauthorize...

PT-2020-1307 · Oracle · Oracle Identity Manager

Name of the Vulnerable Software and Affected Versions: Oracle Identity Manager versions 11.1.2.3.0 through 12.2.1.3.0 Description: The issue is related to inadequate access control in the Advanced Console component of Oracle Identity Manager. It can be exploited by a remote attacker to compromise...

Oracle Siebel CRM CVE-2020-2559 Remote Security Vulnerability

Description Oracle Siebel CRM is prone to a remote security vulnerability. This vulnerability affects the 'UIF Open UI' component and can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 19.7 and prior Technologies Affected Oracle Siebel UI...

Oracle Hospitality OPERA 5 CVE-2020-2677 Remote Security Vulnerability

Description Oracle Hospitality OPERA 5 is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Login' component is affected. This vulnerability affects the following supported versions: 5.5, 5.6 Technologies Affected Oracle Hospitality OPERA ...

Oracle FLEXCUBE Investor Servicing cpujan2020 Multiple Security Vulnerabilities

Description Oracle FLEXCUBE Investor Servicing is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Infrastructure' sub component is affected. These vulnerabilities affect the following supported versions: 12.1.0 through 12.4.0, 14.0...

Oracle Outside In Technology Multiple Remote Security Vulnerabilities

Description Oracle Outside In Technology is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Outside In Filters' component is affected. These vulnerabilities affect the following supported versions: 8.5.4 Technologies Affecte...

EulerOS 2.0 SP2 : jakarta-commons-httpclient (EulerOS-SA-2019-2397)

According to the version of the jakarta-commons-httpclient package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Hyper-Text Transfer Protocol HTTP is perhaps the most significant protocol used on the Internet today. Web services,...

Apache HTTP Server HTTP/2 DoS

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

Exadata Plug-In Deploy and Install Sub-component Privilege Escalation

The vulnerability of the Exadata Plug-In Deploy and Install component of the Enterprise Manager for Exadata software from Oracle involves access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using t...

MICROS Relate CRM Unauthorized Access

The vulnerability of the Internal Operations component of the MICROS Relate CRM Software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Oracle WebLogic Server EJB Unauthorized Access

The vulnerability of the EJB container of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information v...

Tree Manager Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access

The vulnerability of the Tree Manager sub-component of the Oracle PeopleSoft Enterprise PeopleTools business application package is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data using the HTTP protocol...

Portal sub-component PeopleSoft Enterprise PeopleTools Data Access

The vulnerability of the Portal subcomponent of the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

Oracle E-Business Suite Wireless Sub-component Data Access Privilege Escalation

The vulnerability of the Wireless component of the Oracle Field Service system, a part of the Oracle E-Business Suite, relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly...

OAM Component Unauthorized Access

The vulnerability of the OAM component in Oracle JDeveloper and ADF is related to lack of access control. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Marketing Administration Oracle Marketing E-Business Suite Privilege Escalation

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

Oracle FLEXCUBE Direct Banking Email Unauthorized Access

The vulnerability of the eMail component of the Oracle FLEXCUBE Direct Banking system relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP protoc...

Content Oracle Content Manager Data Modification

The vulnerability of the Content sub-component of the Oracle Content Manager component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using...

Oracle BI Publisher Multiple Remote Security Vulnerabilities

Description Oracle BI Publisher is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Mobile Service' and 'BI Publisher Security' components are affected. These vulnerabilities affect the following supported versions: 11.1.1.9....

Oracle Hyperion Enterprise Performance Management Architect Remote Security Vulnerability

Description Oracle Hyperion Enterprise Performance Management Architect is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Workspace' sub component is affected. This vulnerability affects the following supported versions: 11.1.2.4...