421 matches found
PT-2019-3679
Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This easily exploitable...
PT-2019-3774
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to inadequate access control in the Console subcomponent of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can be...
PT-2019-3780
Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 17.0 Description The issue is related to inadequate access control in the Segment component of Oracle Retail Customer Management and Segmentation Foundation. It can be...
PT-2019-3622
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Content Manager component. It allows an unauthenticated...
PT-2019-3722
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Workflow product, specifically the Worklist component. It allows an unauthenticated attacker with...
PT-2019-3776
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3.0 Description The issue is related to inadequate access control in the Sample apps component of Oracle WebLogic Server, part of Oracle Fusion Middleware. This allows an unauthenticated attacker with...
PT-2019-3587
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 and 8.57 Description The issue is related to inadequate access control in the Integration Broker component of PeopleSoft Enterprise PeopleTools, allowing a low-privileged attacker with network...
PT-2019-3712
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component, allowing a low-privileged attacker with Admin - Configuration...
PT-2019-3614
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.34 Oracle VM VirtualBox versions prior to 6.0.14 Description A vulnerability in the Oracle VM VirtualBox product allows a low-privileged attacker with logon to the infrastructure where Oracle VM...
PT-2019-3675
Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 17.1.0 through 17.12.12 Description The issue is related to inadequate access control in the Web Access component of the Primavera P6 Enterprise Project Portfolio Management product...
PT-2019-3631
Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 15.1.0 through 15.2.18 Primavera P6 Enterprise Project Portfolio Management versions 16.1.0 through 16.2.18 Primavera P6 Enterprise Project Portfolio Management versions 17.1.0...
PT-2019-3711
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...
PT-2019-3708
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Human Resources version 9.2 Description The issue is related to inadequate access control in the US Federal Specific component of the PeopleSoft Enterprise HCM Human Resources product. This can be exploited by a remot...
PT-2019-3654 · Oracle +7 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the Server: DDL component of the Oracle MySQL database management system. This can be exploited by a remote attacker to cause a denial of...
PT-2019-3659 · Oracle +7 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the Server: Optimizer component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...
PT-2019-3482
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D80 on SRX Series. Description A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allows an attacker to fully compromise the host system. A local authenticated user can...
PT-2019-4059
Name of the Vulnerable Software and Affected Versions IntelR Active System Console versions prior to 8.0 Build 24 Description The issue is related to insufficient path checking in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. ...
PT-2019-3535
Name of the Vulnerable Software and Affected Versions Moxa EDR 810 versions 5.1 and prior Description The issue allows an unauthenticated attacker to retrieve some log files from the device, potentially leading to sensitive information disclosure. This is possible because log files must have...
PT-2019-5422
Name of the Vulnerable Software and Affected Versions Java SE versions 7u221, 8u212, 11.0.3, and 12.0.1 Java SE Embedded version 8u211 Eclipse OpenJ9 affected versions not specified Description The issue is related to inadequate access control in the Java SE and Java SE Embedded components,...
CVE-2019-7848
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...