Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: Message Display. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2490

The CVE-2019-2490 entry affects Oracle’s PeopleSoft Enterprise PeopleTools, Panel Processor subcomponent, in versions 8.55, 8.56 and 8.57. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though exploitation requires user interaction. The impact is unauthor...

CVE-2019-2496

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2398

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Deployment. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2493

The CVE-2019-2493 issue affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise CS Campus Community component (Frameworks subcomponent). Affected versions are 9.0 and 9.2. The vulnerability allows an unauthenticated attacker who has network access via HTTP to compromise the CS ...

CVE-2019-2485

CVE-2019-2485: Oracle E-Business Suite – Mobile Field Service Administration is affected. Affected versions include 12.1.1–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service, with human interaction required, potentia...

CVE-2019-2427

The CVE-2019-2427 entry pertains to Oracle WebCenter Portal within Oracle Fusion Middleware (WebCenter Spaces Application). Affected versions are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise the portal, with the potenti...

Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM RLKS Administration and Reporting Tool Admin

Summary There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM Rational License Key Server Administration and Reporting Tool Admin ART. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An...

PT-2020-6621 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 20200801 Description: The issue is related to a stack-buffer-overflow in the DumpRawUIConfig function located in the odf dump.c file of the GPAC multimedia platform. This allows a remote attacker to access confidential...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cast Iron (aka App Connect Professional)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10 FP25 used by IBM Cast Iron. IBM Cast Iron has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1517 DESCRIPTION: A flaw in the java.math component in IBM SDK, Java Technology Editio...

Buffer Overflow Vulnerability in Multiple Siemens Products

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A stack-based buffer overflow vulnerability exists in multiple Siemens products. A local attacker can exploit the vulnerability to execute code with elevated privileges, impacting the...

Security Bulletin: Vulnerabilities identified in IBM® Java SDK affect WebSphere Service Registry and Repository and WebSphere Service Registry and Repository Studio (CVE-2018-3139 and CVE-2018-3180)

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 used by WebSphere Service Registry and Repository and WebSphere Service Registry and Repository Studio. These issues were disclosed as part of the IBM Java SDK updates in October 2018. These issues are also addressed by...

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite and SIMATIC IT UA Discrete Manufacturing License Issue Vulnerabilities

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite, and SIMATIC IT UA Discrete Manufacturing are products of Siemens, Germany.Siemens SIMATIC IT LMS is a line monitoring system for overall equipment effectiveness OEE. Siemens SIMATIC IT LMS is a line monitoring system for Overall Equipment...

Unspecified Vulnerability in Oracle E-Business Suite iStore

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software. iStore is one of the e-business applications that enable merchants to efficiently build, deploy, manage, and personalize their Internet storefronts. iStore is an e-commerce...

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3195

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3158

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: Emergency Response System. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...