4959 matches found
CVE-2020-2569: Undefined Security Weakness
Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...
CVE-2020-2516: Undefined Security Weakness
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Materialized View, Create Table privilege with network access via OracleNet...
CVE-2020-2515: Undefined Security Weakness
Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via OracleN...
CVE-2020-2518: Undefined Security Weakness
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to...
CVE-2020-2510: Undefined Security Weakness
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Core RDBMS. Successful attack...
CVE-2020-2527: Undefined Security Weakness
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via OracleNet to compromi...
Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09960)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Core RDBMS component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker...
Unspecified Vulnerability in Oracle Database Server (CNVD-2020-04348)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to unauthorized update,...
Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02559)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to cause the Core RDBMS ...
CVE-2020-2517: Undefined Security Weakness
Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Procedure, Create Database Link privilege with...
CVE-2020-2512: Undefined Security Weakness
Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Database Gatew...
Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02558)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to cause a takeover of t...
Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09958)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Applications DBA component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c...
Oracle Ties Previous All-Time Patch High with January Updates
Oracle has patched 334 vulnerabilities across all of its product families in its January 2020 quarterly Critical Patch Update CPU. Out of these, 43 are critical/severe flaws carrying CVSS scores of 9.1 and above. The CPU ties for Oracle’s previous all-time high for number of patches issued, in Ju...
Oracle Database Server CVE-2020-2731 Local Security Vulnerability
Description Oracle Database Server is prone to a local security vulnerability. The vulnerability can be exploited over the 'Local Logon' protocol. The 'Core RDBMS' component is affected. This vulnerability affects the following supported versions: 12.1.0.2, 12.2.0.1, 18c and 19c Technologies...
Oracle Database Server CVE-2020-2568 Local Security Vulnerability
Description Oracle Database Server is prone to a local security vulnerability that exists in Oracle Applications DBA. The vulnerability can be exploited over the 'Local Logon' protocol. For an exploit to succeed, the attacker must have 'Local Logon' privilege. This vulnerability affects the...
PT-2020-1542
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Description The issue is related to a vulnerability in the Core RDBMS component of Oracle Database Server, which can be exploited by an unauthenticated attacker with networ...
PT-2020-1424
Name of the Vulnerable Software and Affected Versions Enterprise Manager for Oracle Database versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Discovery Framework component of Oracle Enterprise Manager for Oracle Database. It can be...
PT-2020-1425
Name of the Vulnerable Software and Affected Versions Enterprise Manager for Oracle Database versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Target Management component of Oracle Enterprise Manager. It can be exploited by a remote...
PT-2020-1427
Name of the Vulnerable Software and Affected Versions Enterprise Manager for Oracle Database versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to inadequate access control in the Enterprise Config Management component of Oracle Enterprise Manager. It allows a remote attacker ...