CVE-2019-2735: Undefined Security Weakness

Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion subcomponent: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

PT-2019-16482

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle Payments component, specifically the File Transmission subcomponent. It allows an...

UBUNTU-CVE-2019-2786

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

PT-2019-5422

Name of the Vulnerable Software and Affected Versions Java SE versions 7u221, 8u212, 11.0.3, and 12.0.1 Java SE Embedded version 8u211 Eclipse OpenJ9 affected versions not specified Description The issue is related to inadequate access control in the Java SE and Java SE Embedded components,...

OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26749)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An access control error vulnerability exists in the Security subcomponent of Oracle Java SE versions 11.0.3 and 12.0.1. An...

CVE-2019-1940: Improper Certificate Validation

A vulnerability in the Web Services Management Agent WSMA feature of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509...

PT-2019-3416

Name of the Vulnerable Software and Affected Versions Java SE versions 8u212, 11.0.3, and 12.0.1 Java SE Embedded version 8u211 Description The issue is related to inadequate access control in the Security component of Java SE and Java SE Embedded. Exploitation of this issue can allow an...

PT-2019-3418

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.3 and 12.0.1 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, resulting in unauthorized read access to a subset of Java SE accessible data...

Privilege Escalation

MySQL is vulnerable privilege escalation vulnerability. A low privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a...

Information Disclosure

MySQL is vulnerable to information disclosure vulnerability. A high privileged attacker with network access via multiple protocols could compromise MySQL Server with the help of human interaction of another person along with the attacker resulting in unauthorized read access to a subset of MySQL...

CVE-2019-2720

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...

CVE-2019-2586

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: RemoteCall. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2019-2579

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2564

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2019-2609: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2564: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

PT-2019-16442

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Solaris, resulting in unauthorized read access to a subset of Oracle Solaris accessible data. Recommendations...

CVE-2019-2572: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...