214 matches found
CVE-2020-2524
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: InQuira Search. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of...
CVE-2020-2524
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: InQuira Search. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of...
CVE-2020-2553
The CVE-2020-2553 entry describes an unauthenticated remote vulnerability in Oracle Knowledge 8.6.0–8.6.3, affecting the Information Manager Console. The issue allows network access via HTTP to perform unauthorized updates/inserts/deletes and read access to data, with confidentiality and integrit...
CVE-2020-2553
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...
CVE-2020-2524
CVE-2020-2524 affects Oracle Knowledge’s InQuira Search in versions 8.6.0–8.6.3. An unauthenticated, network-accessible attacker via HTTP can cause a hang or frequent crash (DoS). The issue is described as difficult to exploit (high complexity) with no authentication required. Oracle’s APR 2020 C...
CVE-2020-2522
CVE-2020-2522 affects Oracle Knowledge, Information Manager Console (versions 8.6.0–8.6.1). The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access to Oracle Knowledge, with user interaction required. Impact is unauthorized update/insert/delete of data in t...
CVE-2020-2522
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...
CVE-2020-2522: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...
PT-2020-2606
Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the Web Applications - InfoCenter component of Oracle Knowledge, which can be exploited by a remote attacker to impact the...
CVE-2020-2841: Undefined Security Weakness
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Setup, Admin. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge...
CVE-2020-2791: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful...
PT-2020-2605
Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.2 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge. It allows a high-privileged attacker with logon access to the...
CVE-2020-2795: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Knowledge executes to...
PT-2020-2604
Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.2 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge. It allows an unauthenticated attacker with network access via HTT...
PT-2020-2602
Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the InQuira Search component of Oracle Knowledge, allowing a remote attacker to cause a denial of service via HTTP. Successful...
PT-2020-2607
Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the Information Manager Console component of Oracle Knowledge, allowing a remote attacker to cause a denial of service via the...
CVE-2020-2932: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...
CVE-2020-2553: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...
CVE-2020-2524: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: InQuira Search. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of...
CVE-2020-2931: Undefined Security Weakness
Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Web Applications - InfoCenter. Supported versions that are affected are 8.6.0-8.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...