PT-2021-2873 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to the Recovery component of Oracle Database Server, where an easily exploitable vulnerability allows a high-privileged attacker with DBA Level...

PT-2021-2872

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c and 19c Description The issue is related to a vulnerability in the Java VM component, which can be exploited by a low-privileged attacker with Create Session privilege and network access...

PT-2021-2855 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database - Enterprise Edition versions 12.1.0.2 through 19c Description: The issue is related to inadequate access control in the Oracle Database - Enterprise Edition component of Oracle Database Server. It allows a high-privileged...

Oracle MySQL input validation vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit this vulnerability to affect availability...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An input validation error vulnerability exists in Oracle Database Server 12.1.0.2,...

Oracle MySQL input validation vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Parser component of Oracle MySQL Server 5.7.29, 8.0.19, and earlier versions. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and availabilit...

Oracle MySQL input validation vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Optimizer component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing

Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause a denial of...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt

Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Supplier Lifecycle Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Program Management

Summary Multiple Oracle Database server security vulnerabilities affect IBM IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause ...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated...

PT-2021-5455 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description: The issue is related to the Advanced Networking Option component of Oracle Database Server, allowing an unauthenticated attacker with network access via Oracle Net to...

Unified Audit Oracle Database Server Data Access Privilege Escalation

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected...

Oracle Database Server Advanced Networking Option Data Compromise

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Oracle Database Server Java VM Privilege Escalation

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data, or to obtain unauthorized access to protect...

Oracle Database Scheduler Code Execution

The vulnerability of the RDBMS Scheduler component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...

Oracle Database Server Text Component Partial DoS

The vulnerability of the Oracle Text component of the Oracle Database Server system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions using specially crafted network packets...

Oracle Database Server RDBMS Sharding Full Control

The vulnerability of Oracle Database Server’s RDBMS sharding component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application using Oracle Net technology...

Oracle Application Express Survey Builder XSS

The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Sourcing

Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated attacker to caus...