CVE-2020-2949: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Caching, CacheStore, Invocation. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2764: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: Advanced Management Console. The supported version that is affected is Java Advanced Management Console: 2.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2020-2130

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Partners component of Oracle Marketing, part of the Oracle...

CVE-2020-2889: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM...

CVE-2020-2766: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

PT-2020-2530

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access controls in the Caching, CacheStore, and Invocation components of Oracle Coherence. This can be exploited by a remote...

PT-2020-2627

Name of the Vulnerable Software and Affected Versions Oracle Configurator versions 12.1 and 12.2 Description The issue is related to insufficient access control in the Installation component of the Oracle Configurator application. It allows a remote attacker to gain unauthorized access to protect...

PT-2020-2574

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2020-2625

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel UI Framework versions 20.2 and prior Description The issue is related to inadequate access control in the EAI and SWSE components of the Oracle Siebel UI Framework, allowing a low-privileged attacker with network acces...

PT-2020-2296

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Print Server versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Print Server versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Print Server...

PT-2020-2545

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.16 Description The issue is related to inadequate access control in the Advanced Management Console component of the Java SE product. It allows an unauthenticated attacker with network access via...

PT-2020-2539

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting versions 11.1.2.4 Description The issue is related to insufficient access control in the Web Based Report Designer component of Oracle Hyperion Financial Reporting. It allows a remote attacker to gain...

PT-2020-2494

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to insufficient access controls in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTT...

PT-2020-2291

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description The issue is related to the RDBMS/Optimizer component of Oracle Database Server, where an easily exploitable vulnerability allows a high-privileged attacker with...

CVE-2020-10955: Missing Authorization

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders...

PT-2020-3619 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 11.1 through 12.9 Description: The issue is related to parameter tampering on an upload feature, allowing unauthorized users to read content available under specific folders. This can lead to information disclosure,...

PT-2020-2646

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.40 Oracle VM VirtualBox versions prior to 6.0.20 Oracle VM VirtualBox versions prior to 6.1.6 Description The issue is related to the Oracle VM VirtualBox product, specifically the Core component. It...

Oracle Retail Customer Management and Segmentation Foundation Unauthorized Access Vulnerability (CNVD-2020-05111)

Oracle Retail Customer Management and Segmentation Foundation is a retail customer management product. An unspecified vulnerability exists in the Internal Operations component of Oracle Retail Customer Management and Segmentation Foundation 16.0. An attacker can exploit this vulnerability to gain...

Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access Vulnerability (CNVD-2020-05105)

Oracle PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. A security vulnerability exists in the Elastic Search component in Oracle PeopleSoft Enterprise PeopleTools 8.56, 8.57. An attacker could...

CVE-2020-2700

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...