PT-2020-2495 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This can be exploite...

PT-2020-2297

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the Admin component of the Oracle iSupport product. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-2321

Name of the Vulnerable Software and Affected Versions Oracle Marketing versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the Marketing Administration component of Oracle Marketing. It can be exploited by a remote attacker to gain unauthorized acces...

PT-2020-2592

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community version 9.2 Description The issue is related to insufficient access control in the Self-Service component of the PeopleSoft Enterprise CS Campus Community product. It allows a low-privileged attacker...

PT-2020-2573

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with network...

PT-2020-2532

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 11.1.1.9.0 Description The issue is related to insufficient access control in the Web Listener component of Oracle HTTP Server, allowing an unauthenticated attacker with network access via HTTP to compromise the...

PT-2020-2608

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Candidate Gateway component of PeopleSoft Enterprise HRMS, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-2626

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.3.7, 6.4.2, and 6.4.3 Description The issue is related to inadequate access control in the Security component of Oracle Transportation Management. It allows a low-privileged attacker with network...

PT-2020-2577

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Process Scheduler component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker wi...

PT-2020-2591

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Purchasing version 9.2 Description The issue is related to inadequate access control in the Supplier Change component, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

PT-2020-2535

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0 Description The issue is related to insufficient access control in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition, allowing a low-privileged attacker with networ...

PT-2020-2579

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Diagnostic Framework component of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2020-2628

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.3 through 9.3.6 Description The issue is related to inadequate access control in the Security component of Oracle Agile PLM, allowing a remote attacker to gain unauthorized access to protected information via the...

PT-2020-2493

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 11.1.2.3.0 and 12.2.1.3.0 Description The issue is related to insufficient access control in the SSO Engine component of Oracle Access Manager, allowing a low-privileged attacker with network access via HTTP to...

The vulnerability of Google Chrome’s Skia graphics library, related to insufficient validation of input data, allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of Google Chrome’s Skia graphics library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity through a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to operations beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

PT-2020-12180

Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue is related to Broken Access Control in Sunnet eHRD, a human training and development management system. After logging in, attackers can use a specific URL to access unauthorized...

CVE-2020-10510: Incorrect Authorization

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...