Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37220)

Java SE is short for Java Platform Standard Edition, for the development and deployment of desktop, server, and embedded devices and real-time environment of Java applications. Java SE Embedded is based on Java SE, and provides specific features and support for embedded systems. An unspecified...

PT-2019-3690

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access control in the SMF services & legacy daemons component of Oracle Solaris. It allows a low-privileged attacker with logon access to the infrastructure where Oracl...

PT-2019-3597

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.34 and prior to 6.0.14 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized access to protected...

PT-2019-3583

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Performance Monitor subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2019-3625

Name of the Vulnerable Software and Affected Versions Oracle Banking Digital Experience versions 18.1 through 19.1 Description The issue is related to inadequate access control in the Loan Calculator component of Oracle Banking Digital Experience, part of Oracle Financial Services Applications...

PT-2019-3717

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools, allowing a remote attacker to modify, add, or delet...

PT-2019-3695

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2.4 Description The issue is related to inadequate access control in the Security Models component, allowing a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2019-3749

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology product, which is a suite of software development kits SDKs. Th...

PT-2019-3681

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

PT-2019-3719

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools product, specifically in the Portal component. It allows an unauthenticated...

PT-2019-3704

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3727

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Fluid Core subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2019-3711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3622

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Content Manager component. It allows an unauthenticated...

PT-2019-3600

Name of the Vulnerable Software and Affected Versions Oracle Installed Base versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Engineering Change Order component of Oracle Installed Base in Oracle E-Business Suite. This can be exploited by a remote...

PT-2019-3696

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, 13 Java SE Embedded version 8u221 Description The issue is related to insufficient access control in the Libraries component of Java SE and Java SE Embedded, allowing an unauthenticated attacker with...

PT-2019-3722

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Workflow product, specifically the Worklist component. It allows an unauthenticated attacker with...

PT-2019-3776

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3.0 Description The issue is related to inadequate access control in the Sample apps component of Oracle WebLogic Server, part of Oracle Fusion Middleware. This allows an unauthenticated attacker with...

PT-2019-3676

Name of the Vulnerable Software and Affected Versions Java SE versions 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Description A difficult to exploit vulnerability in the Scripting component of Java SE and Java SE Embedded allows an unauthenticated attacker with network access via multip...

keycloak: cross-realm user access auth bypass

A flaw was found in the Keycloak REST API where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks...