CVE-2020-2522

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Knowledge executes to...

CVE-2020-2932

CVE-2020-2932 affects Oracle Knowledge, Information Manager Console component, versions 8.6.0–8.6.3. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to cause a hang or frequent crashes (complete DoS) of Oracle Knowledge. The root cause is described as a vulnerab...

CVE-2020-2791

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...

CVE-2020-2553

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

CVE-2020-2522

CVE-2020-2522 affects Oracle Knowledge, Information Manager Console (versions 8.6.0–8.6.1). The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access to Oracle Knowledge, with user interaction required. Impact is unauthorized update/insert/delete of data in t...

CVE-2020-2553

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

CVE-2020-2553

The CVE-2020-2553 entry describes an unauthenticated remote vulnerability in Oracle Knowledge 8.6.0–8.6.3, affecting the Information Manager Console. The issue allows network access via HTTP to perform unauthorized updates/inserts/deletes and read access to data, with confidentiality and integrit...

PT-2020-2601

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.1 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge, allowing a remote attacker to modify, add, or delete data using t...

CVE-2020-2522: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...

PT-2020-2605

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.2 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge. It allows a high-privileged attacker with logon access to the...

CVE-2020-2932: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

CVE-2020-2553: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

CVE-2020-2795: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Knowledge executes to...

PT-2020-2603

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge, resulting in unauthorized update, insert, or delete access to some of Oracle...

PT-2020-2607

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge, allowing a remote attacker to cause a denial of service via the...

PT-2020-2604

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.2 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge. It allows an unauthenticated attacker with network access via HTT...

CVE-2020-2791: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...

CVE-2016-6588

A Cross-Site Scripting XSS vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0...

PT-2020-8045

Name of the Vulnerable Software and Affected Versions: Symantec IT Management Suite version 8.0 Description: A Cross-Site Scripting XSS issue exists in the ITMS workflow process manager console. Recommendations: For Symantec IT Management Suite version 8.0, consider disabling access to the ITMS...