CVE-2019-2941: Undefined Security Weakness

Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion component: Modeling. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Profitability...

CVE-2019-2899: Undefined Security Weakness

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: OAM. Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...

CVE-2019-2935: Undefined Security Weakness

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

CVE-2019-2951: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

CVE-2019-2913: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While th...

CVE-2019-3012: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: BI Platform Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2019-2939: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While th...

CVE-2019-2887: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2019-3001: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...

CVE-2019-2977: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

CVE-2019-3015: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

PT-2019-3661

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement version 9.2 Description The issue is related to inadequate access control in the eProcurement component of PeopleSoft Enterprise SCM eProcurement, allowing an unauthenticated attacker with network access...

CVE-2019-2933: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

CVE-2018-2875: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While th...

PT-2019-3753 · Oracle · Adf +2

Name of the Vulnerable Software and Affected Versions: Oracle JDeveloper and ADF versions 11.1.1.9.0 through 12.2.1.3.0 Description: The issue is related to insufficient access control in the OAM component of Oracle JDeveloper and ADF, allowing a remote attacker to gain unauthorized access to...

PT-2019-3715

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Description The issue allows an unauthenticated attacker with network access to compromise Java SE and Java SE Embedded, resulting in unauthorized read access to a...

PT-2019-3778

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to the Web Services component of Oracle WebLogic Server, which is part of Oracle Fusion Middleware. It allows a low-privileged attacker with...

PT-2019-3674

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.4 and 13 Description The issue is caused by a buffer overflow in the Hotspot component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

PT-2019-3692

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, requiring human interaction from a person other than the attacker...

PT-2019-3584

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to inadequate access control in the BI Platform Security subcomponent of Oracle Business Intelligence Enterprise...