PT-2019-2016

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 and 8.57 Description The issue is related to inadequate access control in the Fluid Homepage & Navigation subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker...

PT-2019-1957

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55, 8.56, and 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated attacker with networ...

PT-2019-2013

Name of the Vulnerable Software and Affected Versions Oracle Service Bus versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to inadequate access control in the Web Container subcomponent of Oracle Service Bus, part of Oracle Fusion Middleware. It allows an...

PT-2019-3115

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools version 9.2 Description The issue is related to inadequate access control in the Web Runtime component of JD Edwards EnterpriseOne Tools, allowing a low-privileged attacker with network access via HTTP to...

PT-2019-1881

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Preferences subcomponent of the Oracle CRM Technical Foundation component. This can be...

PT-2019-1853

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Trade Management component, specifically in the User...

PT-2019-1872

Name of the Vulnerable Software and Affected Versions Java SE versions 7u211, 8u202, 11.0.2, 12 Java SE Embedded version 8u201 Description The issue is related to the RMI component of Oracle Java SE and Java SE Embedded, which is associated with inadequate access control. This allows an...

PT-2019-1884

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle CRM Technical Foundation component, specifically in the Preferences subcomponen...

PT-2019-2017

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite version 11.1.1.9.0 Description The issue is related to inadequate access control in the Fabric Layer subcomponent of Oracle SOA Suite, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2019-1852

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the User Interface component of Oracle Trade Management, part of the...

PT-2019-1882

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite subcomponent: Print Server versions 12.1.1 through 12.1.3, 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Print Server subcomponent of Oracle One-to-One Fulfillment, part of t...

PT-2019-2014

Name of the Vulnerable Software and Affected Versions Oracle AutoVue 3D Professional Advanced versions 21.0.0 through 21.0.1 Description The issue is related to inadequate access control in the Format Handling - 2D subcomponent of Oracle AutoVue 3D Professional Advanced, allowing an unauthenticat...

PT-2019-1879

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing Administration...

PT-2019-1999

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 Description The issue is related to inadequate access control in the Job Opening subcomponent of PeopleSoft Enterprise HCM Talent Acquisition Manager, allowing an unauthenticated...

PT-2019-1864

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/J versions prior to 8.0.15 Oracle MySQL Connector/J version 8.0.15 Description The issue is related to inadequate access control in the Connector/J subcomponent of Oracle MySQL Connectors, allowing a highly privileged...

PT-2019-1877

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.28 Oracle VM VirtualBox versions prior to 6.0.6 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with log...

PT-2019-4256

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Process Integration Adapter Engine versions prior to 7.10 SAP NetWeaver Process Integration Adapter Engine versions 7.10 to 7.11 SAP NetWeaver Process Integration Adapter Engine version 7.30 SAP NetWeaver Process Integration...

PT-2019-1746

Name of the Vulnerable Software and Affected Versions Intel Platform Sample/Silicon Reference firmware for 8th Generation Intel Core Processor Intel Platform Sample/Silicon Reference firmware for 7th Generation Intel Core Processor Description The issue is related to a privilege escalation...

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...

PT-2019-1407

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Server affected versions not specified Description The issue is related to inadequate access control, allowing a remote attacker to send a specially crafted request to the vulnerable server and potentially elevate their...