6127 matches found
CVE-2020-14584
CVE-2020-14584 affects Oracle BI Publisher (Oracle Fusion Middleware) for versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability in the BI Publisher Security component allows an unauthenticated attacker, with network access over HTTP, to compromise data; successful access can lead to unauthorized ...
CVE-2020-14584
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...
CVE-2020-14571
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
CVE-2020-14571
CVE-2020-14571 affects Oracle BI Publisher (Mobile Service), part of Oracle Fusion Middleware. Affected versions are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated, remote attacker over HTTP to compromise BI Publisher, potentially enabling unauthorized update/i...
CVE-2020-14570
CVE-2020-14570 affects Oracle BI Publisher (Mobile Service) in Oracle Fusion Middleware. Affected versions are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, with human interaction required for e...
CVE-2020-14570
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
PT-2020-3578
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, part of Oracle Fusion Middleware. It allows an...
PT-2020-3577
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service subcomponent of Oracle BI Publisher, part of Oracle Fusion Middleware. This allows an...
PT-2020-3535
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to the BI Publisher Security component of Oracle BI Publisher, allowing an unauthenticated attacker with network access via HTTP to compromise the...
PT-2020-3536
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, allowing an unauthenticated attacker with network access...
CVE-2020-14696: Undefined Security Weakness
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14570: Undefined Security Weakness
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
CVE-2020-14585: Improper Neutralization of Input During Web Page Generation
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
CVE-2020-14571: Undefined Security Weakness
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
PT-2020-3315
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access control in the Layout Templates component of Oracle BI Publisher, allowing a remote attacker to gain read, modify, add, or...
CVE-2020-14584: Improper Neutralization of Input During Web Page Generation
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...
WS-2020-0399
In Ghost headless CMS, versions 1.24.3 through 2.38.1 and 3.0.0 through 3.17.1 are vulnerable to Server-Side Request Forgery in the OEmbed API. An attacker with a publisher role editor, author, contributor, administrator in a blog may be able to leverage this to make arbitrary GET requests in a...
PT-2020-6874 · Flexnet +1 · Lmadmin +1
Name of the Vulnerable Software and Affected Versions: FlexNet Publisher's lmadmin version 11.16.5 Description: A Denial of Service DoS issue was found in FlexNet Publisher's lmadmin, related to resource release errors. This can be exploited by a remote attacker to cause a service disruption,...
WSO2 API Manager Code Issue Vulnerability
WSO2 API Manager is a suite of API lifecycle management solutions from WSO2, Inc. A code issue vulnerability exists in WSO2 API Manager version 3.0.0, which stems from the program's failure to properly restrict network access to Publisher nodes, and can be exploited by attackers to obtain sensiti...
