CVE-2020-2542: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2537: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2020-2556: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2667: Undefined Security Weakness

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking (CNVD-2020-09664)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An unspecified vulnerability...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-04360)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. CRM Technical Foundation is one ...

CVE-2020-2548: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2020-2657: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2517: Undefined Security Weakness

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Procedure, Create Database Link privilege with...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02555)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to gain read access to...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04377)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

CVE-2020-2729: Undefined Security Weakness

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Advanced Console. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Investor Servicing (CNVD-2020-09661)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

PT-2020-1410

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 16.0 Description The issue is related to inadequate access control in the Promotions component, allowing an unauthenticated attacker with network access via HTTP to compromi...

PT-2020-1583

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to inadequate access control in the Filesystem component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris...

PT-2020-1481

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access controls in the Host Management component of the Enterprise Manager Base Platform product. It allows a high-privileged...

PT-2020-1342

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to inadequate access control in the Core component of Oracle Banking Payments, allowing a low-privileged attacker with network access via HTTP to compromis...

PT-2020-1404

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Others versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Others versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product,...

PT-2020-1422

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Job System component of Oracle Enterprise Manager Base Platform. It can be exploited by a remo...

PT-2020-1586

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product, allowing an unauthenticated attacker wi...