CVE-2020-2706: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

CVE-2020-2900: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: Tools. Supported versions that are affected are 19.3.1 and 20.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2020-2887: Undefined Security Weakness

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2020-2382

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking version 4.0 Description The issue affects the Transaction Processing component of Oracle FLEXCUBE Core Banking, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2020-2947: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft component: Absence Management. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2020-2119

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.6 through 12.2.9 Description The issue is related to inadequate access control in the Absence Recording and Maintenance components of Oracle Human Resources. It allows a low-privileged attacker with networ...

PT-2020-2136

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.0.9 Description The issue is related to inadequate access control in the Infrastructure component of Oracle Financial Services Analytical Applications...

PT-2020-2128

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

Unspecified Vulnerability in Oracle iSupport (CNVD-2020-27007)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

CVE-2020-2760: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2020-2351

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Hedge Management and IFRS Valuations versions 8.0.6 through 8.0.8 Description The issue is related to the lack of protection for service data in the User Interface component of Oracle Financial Services Hedge Manageme...

PT-2020-2126

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Human Resources versions 12.1.1 through 12.1.3 Oracle E-Business Suite Human Resources versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Hierarchy Diagrammers component ...

PT-2020-2190

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupplier Portal versions 12.1.3 and 12.2.5 through 12.2.9 Description The issue is related to a lack of protection for service data in the Oracle iSupplier Portal product. It allows an unauthenticated attacker...

PT-2020-2133

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Human Resources versions 12.1.1 through 12.1.3 Oracle E-Business Suite Human Resources versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Hierarchy Diagrammers component ...

CVE-2020-2514: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

Oracle Marketing Unauthorized Access Vulnerability (CNVD-2020-27005)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

CVE-2020-2940: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

Oracle Database Server Unauthorized Access Vulnerability (CNVD-2020-28004)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. A security vulnerability exists in the APEX component of Oracle Database Server prior to version 19.2. An attacker could exploit this vulnerability to unauthorized update, insert, or delet...

PT-2020-2129

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Outcome-Result component of Oracle Customer Interaction History,...

PT-2020-2603

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge, resulting in unauthorized update, insert, or delete access to some of Oracle...