PT-2020-2128

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-2126

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Human Resources versions 12.1.1 through 12.1.3 Oracle E-Business Suite Human Resources versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Hierarchy Diagrammers component ...

PT-2020-2112

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Shopping Cart versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Shopping Cart versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Shopping Cart...

PT-2020-2114

Name of the Vulnerable Software and Affected Versions Oracle E-Business Intelligence versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the DBI Setups component of Oracle E-Business Intelligence, part of the Oracle E-Business Suite. This can be exploit...

PT-2020-2110

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Oracle iSupport product, specifically in the Profile component. It allows an unauthenticated attacker with network acce...

PT-2020-2129

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Outcome-Result component of Oracle Customer Interaction History,...

PT-2020-2111

Name of the Vulnerable Software and Affected Versions Oracle Email Center versions 12.1.1 through 12.1.3 Oracle Email Center versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the KB Search component of Oracle Email Center, part of the Oracle E-Busines...

PT-2020-2117

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Email Address list and Message Display components of Oracle Emai...

PT-2020-2298

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Marketing Administration component of Oracle Marketing. It allows an unauthenticated attacker with network access via...

PT-2020-2310

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2307

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2608

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Candidate Gateway component of PeopleSoft Enterprise HRMS, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-2626

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.3.7, 6.4.2, and 6.4.3 Description The issue is related to inadequate access control in the Security component of Oracle Transportation Management. It allows a low-privileged attacker with network...

PT-2020-2291

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description The issue is related to the RDBMS/Optimizer component of Oracle Database Server, where an easily exploitable vulnerability allows a high-privileged attacker with...

PT-2020-2330

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Notes component of the Oracle Common Applications Calendar product. It allows an unauthenticated attacker with network...

PT-2020-2393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Work Provider Administration component of Oracle Universal Work Queue, allowing an unauthenticated attacker with networ...

PT-2020-2625

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel UI Framework versions 20.2 and prior Description The issue is related to inadequate access control in the EAI and SWSE components of the Oracle Siebel UI Framework, allowing a low-privileged attacker with network acces...

PT-2020-2573

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with network...

PT-2020-2579

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Diagnostic Framework component of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2020-2545

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.16 Description The issue is related to inadequate access control in the Advanced Management Console component of the Java SE product. It allows an unauthenticated attacker with network access via...