PT-2019-3754

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to a lack of protection for internal data in the BI Publisher Security component of Oracle Fusion Middleware. This can be...

PT-2019-3808

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, 13 Java SE Embedded version 8u221 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded, resulting in unauthorized...

PT-2019-3692

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, requiring human interaction from a person other than the attacker...

PT-2019-3674

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.4 and 13 Description The issue is caused by a buffer overflow in the Hotspot component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

PT-2019-3713

Name of the Vulnerable Software and Affected Versions Siebel UI Framework versions prior to 19.8 Description The issue is related to inadequate access control in the Siebel UI Framework component of Oracle Siebel CRM. This can be exploited by a remote attacker to gain unauthorized access to...

OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

PT-2019-3167

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense Software affected versions not specified Description The issue is related to insufficient application identification in the application policy configuration, which could allow a remote attacker to gain unauthoriz...

PT-2019-3165

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Mobile iOS affected versions not specified Description The issue is caused by insufficient Secure Sockets Layer SSL certificate validation, allowing an unauthenticated, remote attacker to gain unauthorized read access to...

CVE-2019-1948: Improper Certificate Validation

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Compiling. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...

PT-2019-13327

Name of the Vulnerable Software and Affected Versions Search Guard versions prior to 24.3 Description The issue occurs when Cross Cluster Search CCS is enabled, allowing authenticated users to gain read access to data they are not authorized to see. Recommendations For versions prior to 24.3,...

CVE-2019-13415: Improper Handling of Insufficient Permissions or Privileges

Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users can gain read access to data they are not authorized to see...

NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Vulnerability (NS-SA-2019-0148)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.7.0-openjdk packages installed that are affected by a vulnerability: - Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1;...

CVE-2019-2735

Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion subcomponent: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

CVE-2019-2816

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

CVE-2019-2786

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

CVE-2019-2766

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

CVE-2019-2738

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Compiling. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple...