CVE-2020-14740: Undefined Security Weakness

Vulnerability in the SQL Developer Install component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Client Computer User Account privilege with logon to the...

PT-2020-4420

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to insufficient input validation in the Oracle Text component, allowing an unauthenticated attacker with network access via Oracle Ne...

CVE-2020-14899: Undefined Security Weakness

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

CVE-2020-14736: Undefined Security Weakness

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Public Synonym privilege with network access via Oracle Net to compromi...

CVE-2020-14763: Undefined Security Weakness

Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise...

PT-2020-4409

Name of the Vulnerable Software and Affected Versions: Oracle Application Express versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...

CVE-2020-14742: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYSDBA level account privilege with network access via Oracle Net to...

CVE-2020-14900: Undefined Security Weakness

Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...

PT-2020-4411

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component. It allows a low-privileged attacker with a valid user account and...

PT-2020-4399

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c Description: The issue is related to insufficient input validation in the SQL Developer Install component of Oracle Database Server. This vulnerability can be easily...

CVE-2020-14735: Undefined Security Weakness

Vulnerability in the Scheduler component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Scheduler...

CVE-2020-14741: Undefined Security Weakness

Vulnerability in the Database Filesystem component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Resource, Create Table, Create View, Create Procedure, Dbfsrole privilege...

CVE-2020-14734: Undefined Security Weakness

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Text. Successful...

CVE-2020-14898: Undefined Security Weakness

Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

CVE-2020-14743: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to...

PT-2020-4405

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Quick Poll component. It allows a low-privileged attacker with a valid user account and network...

CVE-2020-14901: Undefined Security Weakness

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged attacker having Analyze Any privilege with network access via Oracle Net to compromise RDBMS Security. Successful attacks...

CVE-2020-14762: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

PT-2020-4403

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 19c Description: The issue exists due to insufficient input validation in the RDBMS Security component of Oracle Database Server. This allows a remote attacker to gain unauthorized access to protected informatio...

PT-2020-4401

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c Description: The issue is related to insufficient input validation in the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and...