CVE-2020-2969

Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to...

CVE-2020-2974

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2968

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multipl...

CVE-2020-2971

CVE-2020-2971 affects Oracle Application Express within Oracle Database Server (versions 5.1–19.2). The vulnerability allows a low-privileged attacker with SQL Workshop privilege and network access via HTTP to compromise APEX. Attacks require human interaction, and the impact can include unauthor...

Oracle Database Server Application Express Component Cross-Site Scripting Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

CVE-2020-2978

CVE-2020-2978 affects Oracle Database - Enterprise Edition; vulnerable in versions 12.1.0.2, 12.2.0.1, 18c, 19c. The connected material indicates the issue relates to RMAN auditing: Oracle RMAN Missing Auditing for Point‑In‑Time Recovery, enabling limited visibility of certain RMAN operations. Th...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44287)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44291)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44290)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44289)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Oracle Database Server Application Express Component Cross-Site Scripting Vulnerability (CNVD-2020-44292)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Data Pump Component

Oracle Database Server is an object-relational database management system that provides an open, comprehensive, and integrated approach to information management.Data Pump is the data and metadata migration component. A security vulnerability exists in the Data Pump component in Oracle Database...

Unspecified Vulnerability in Oracle Berkeley DB Data Store Component

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Oracle Berkele...

Unspecified Vulnerability in Oracle Database Server Java VM Component (CNVD-2020-44296)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44293)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

PT-2020-3242 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database - Enterprise Edition versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue exists due to insufficient input validation in the Oracle Database - Enterprise Edition component of Oracle Database Server. This allows a...

PT-2020-3573 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: DML component of Oracle MySQL Server. This can be exploited by a remote attacker to cause the server to hang or...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management

Summary Oracle Database Server Publicly disclosed vulnerability affects IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-2527 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Core RDBMS component could allow an authenticated attacker to...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Oracle Database Server Publicly disclosed vulnerability affects IBM Emptoris Strategic Supply Management Platform. Vulnerability Details CVEID: CVE-2020-2527 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Core RDBMS component could allow an authenticate...

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Program Management

Summary Oracle Database Server Publicly disclosed vulnerability affects IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2020-2527 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Core RDBMS component could allow an authenticated attacker to obta...