The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component of the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read, modify, add,...

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read,...

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, allows a perpetrator to gain access to read data.

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain acce...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business processes, allowing attackers to access, modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Discovery Framework component (Oracle OHS) within the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Discovery Framework component Oracle OHS in the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected...

The vulnerability of the Outcome-Result component of the Oracle Customer Interaction History software in the Oracle E-Business Suite, a business automation system, allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Outcome-Result component of the Oracle Customer Interaction History software in the Oracle E-Business Suite involves deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

CVE-2019-4667

IBM UrbanCode Deploy UCD 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID:...

The vulnerability of the KB Search component of the Oracle Email Center messaging software in the Oracle E-Business Suite, a business automation system, allows a malicious individual to access, modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the KB Search component of the Oracle Email Center messaging software within the Oracle E-Business Suite system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain...

The vulnerability of the Profile component in the Oracle iSupport web application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Profile component in the Oracle iSupport web application is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or unauthorizedly access protected information using the HTTP...

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite. This component allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or...

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite. This component allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite, a business automation system, allows a malicious individual to access, modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to...

PT-2020-2236 · Cisco · Snort +3

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions prior to the fixed version Cisco Firepower Threat Defense versions prior to the fixed version Cisco Firepower Management Center versions prior to the fixed version Description: The issue is related to errors in how the Snor...

Schneider Electric Modicon Quantum Has Arbitrary File Read Vulnerability

The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process applications, high availability and safety solutions. An arbitrary file read vulnerability exists in the Schneider Electric Modicon Quantum. A remote attacker could exploit this vulnerability by...

The vulnerability of Firefox’s browser security policy, related to the lack of input data validation mechanisms, allows attackers to compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise data integrity by using the HTTP protocol...

CVE-2020-2866

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2837

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

UBUNTU-CVE-2020-2778

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...