CVE-2020-2785

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2810: Undefined Security Weakness

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

PT-2020-2526

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to inadequate access control in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTTP t...

PT-2020-2404

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 7.3.28 and prior Oracle MySQL Cluster versions 7.4.27 and prior Oracle MySQL Cluster versions 7.5.17 and prior Oracle MySQL Cluster versions 7.6.13 and prior Oracle MySQL Cluster versions 8.0.19 and prior...

PT-2020-2593

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Absence Management version 9.2 Description The issue is related to insufficient access controls in the Absence Management component of Oracle PeopleSoft Enterprise HCM Absence Management. This can be exploited by a...

CVE-2020-2731

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to...

CVE-2020-2593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2590

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2019-16551

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Dining Room Management version 8.0.80 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Dining Room Management, resulting in unauthorized acces...

CVE-2019-2941: Undefined Security Weakness

Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion component: Modeling. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Profitability...

Authorization Bypass

mysql is vulnerable to authorization bypass. An easily exploitable vulnerability allows a low privileged attacker to perform unauthorized update, insert or delete of data and cause a denial of service condition...

CVE-2019-2819

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Audit. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2019-2730

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

PT-2019-16465

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.0.1 through 12.4.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2019-16536

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing...

PT-2019-16463

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing...

Privilege Escalation

MySQL is vulnerable privilege escalation vulnerability. A low privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a...

PT-2019-16435

Name of the Vulnerable Software and Affected Versions Oracle Health Sciences Data Management Workbench version 2.4.8 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench. Successful attacks can result in...

PT-2019-16414

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.8 Description The issue allows an unauthenticated attacker with logon to the infrastructure where the system executes to compromise it. Successful attacks can result in...

PT-2019-16431

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking version 12.0.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other...