Lucene search
+L

46 matches found

NVD
NVD
added 2020/01/15 5:15 p.m.22 views

CVE-2020-2533

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS5.7AI score0.01035EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/15 5:15 p.m.14 views

Design/Logic Flaw

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.8CVSS5.7AI score0.01035EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/01/15 4:33 p.m.6 views

CVE-2020-2534

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS6.3AI score0.00995EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:33 p.m.29 views

CVE-2020-2533

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS5.8AI score0.01035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:33 p.m.25 views

CVE-2020-2534

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS5.8AI score0.00995EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/15 4:33 p.m.57 views

CVE-2020-2533

CVE-2020-2533 affects Oracle Fusion Middleware’s Oracle Reports Developer (component: Security and Authentication) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach Oracle Reports Developer over HTTP to compromise data, with the a...

6.1CVSS5.7AI score0.01035EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
added 2020/01/14 12:0 a.m.24 views

Oracle Reports Developer Multiple Remote Security Vulnerabilities

Description Oracle Reports Developer is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Security and Authentication' component is affected. These vulnerabilities affect the following supported versions: 12.2.1.3.0, 12.2.1.4....

1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.9 views

The vulnerability of the “Valid Session” component in the Oracle Reports Developer reporting software allows a perpetrator to gain access to protected information.

The vulnerability of the “Valid Session” component in the Oracle Reports Developer software relates to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

6.4CVSS6.6AI score0.06466EPSS
SaveExploits5References3Affected Software1
zdt
zdt
added 2019/01/20 12:0 a.m.36 views

Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross-site Scripting XSS Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CV...

7.1AI score0.06466EPSS
SaveExploits5
exploitpack
exploitpack
added 2019/01/17 12:0 a.m.63 views

Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting

Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3...

5.8CVSS6.5AI score0.06466EPSS
SaveExploits5
OSV
OSV
added 2019/01/16 7:30 p.m.5 views

CVE-2019-2413

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...

6.1CVSS6.6AI score0.06466EPSS
SaveExploits5References3
NVD
NVD
added 2019/01/16 7:30 p.m.23 views

CVE-2019-2413

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...

6.1CVSS5.4AI score0.06466EPSS
SaveExploits5References3
Prion
Prion
added 2019/01/16 7:30 p.m.13 views

Design/Logic Flaw

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...

5.8CVSS5.4AI score0.06466EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2019/01/16 7:0 p.m.76 views

CVE-2019-2413

CVE-2019-2413 affects Oracle Fusion Middleware’s Oracle Reports Developer component (subcomponent: Valid Session) in version 12.2.1.3. The flaw allows an unauthenticated attacker with network access over HTTP to compromise Oracle Reports Developer, with human interaction required for exploitation...

6.1CVSS5.3AI score0.06466EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2019/01/16 7:0 p.m.29 views

CVE-2019-2413

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...

5.5AI score0.06466EPSS
SaveExploits5References3
CNVD
CNVD
added 2015/01/22 12:0 a.m.10 views

Unspecified Vulnerability in Oracle Reports Developer

Oracle Reports Developer is a report development, design and production suite. A security vulnerability exists in Oracle Reports Developer that could be exploited by remote attackers to compromise system integrity...

4.3CVSS6.8AI score0.00996EPSS
SaveExploits0References1
zdt
zdt
added 2014/01/29 12:0 a.m.91 views

Oracle Reports Developer Version Release 9i to 10gr2 Database Disclosure

An undocumented PARSEQUERY function in Oracle Forms and Reports allows dumping database username and passwords unauthenticated. The patch / workaround just appears to obfuscate the issue but not actually address it. Affected systems include versions 9iAS, 9iDS, 10G DS and AS, and 10G AS...

6.4CVSS0.9822EPSS
SaveExploits11
Prion
Prion
added 2012/10/16 11:55 p.m.28 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU...

6.4CVSS6.9AI score0.98793EPSS
SaveExploits11References8Affected Software1
Vulnrichment
Vulnrichment
added 2012/10/16 11:0 p.m.9 views

CVE-2012-3152

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the Octob...

8.6AI score0.98793EPSS
SaveExploits11References11
NVD
NVD
added 2008/10/14 9:11 p.m.27 views

CVE-2008-2619

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors...

1.7CVSS5.5AI score0.00543EPSS
SaveExploits0References6
Rows per page
Query Builder