Lucene search
+L

337 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:4 a.m.37 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Program Management

Summary Multiple Oracle Database server security vulnerabilities affect IBM IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause ...

8.8CVSS6.3AI score0.01673EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:1 a.m.46 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management

Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause a...

8.8CVSS6.3AI score0.01673EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Oracle Application Express Opportunity Tracker application, related to deficiencies in access control, allows an attacker to gain access to modify, add, or delete data.

The vulnerability of the Oracle Application Express Opportunity Tracker sales management application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

5.4CVSS6.6AI score0.0069EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.5 views

The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

5.5CVSS6.3AI score0.0069EPSS
Exploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/22 8:34 a.m.27 views

Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Sourcing

Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated attacker to caus...

8.8CVSS6.2AI score0.0122EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/22 8:31 a.m.32 views

Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Contract Management

Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated...

8.8CVSS6.2AI score0.0122EPSS
Exploits0Affected Software1
OSV
OSV
added 2021/01/20 3:15 p.m.3 views

CVE-2021-2116

Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2021/01/20 3:15 p.m.22 views

Design/Logic Flaw

Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...

4.9CVSS5AI score0.0069EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/01/20 3:15 p.m.15 views

Design/Logic Flaw

Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

4.9CVSS5AI score0.0069EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/01/20 3:15 p.m.2 views

CVE-2021-2117

Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...

5.4CVSS6.5AI score0.0069EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/01/20 2:50 p.m.27 views

CVE-2021-2117

Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...

5.4CVSS5.6AI score0.0069EPSS
Exploits0References1
CVE
CVE
added 2021/01/20 2:50 p.m.76 views

CVE-2021-2117

CVE-2021-2117 affects Oracle Database Server’s Application Express Survey Builder; vulnerable in all supported Oracle versions prior to 20.2. An authenticated, low-privilege user with network access via HTTP can exploit this vulnerability, with user interaction required, to potentially read and m...

5.4CVSS5.3AI score0.0069EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/20 2:50 p.m.15 views

CVE-2021-2117

Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...

5.4CVSS5.7AI score0.0069EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/20 12:0 a.m.10 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2021-08532)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS6AI score0.0069EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/20 12:0 a.m.8 views

Oracle Database Server Authorization Issues Vulnerability (CNVD-2021-08531)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS6.1AI score0.0069EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.7 views

Oracle Database Server 安全漏洞

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS6.8AI score0.0069EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.6 views

Oracle Database Server 组件安全漏洞

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS5.8AI score0.0069EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.8 views

The vulnerability of the Oracle Application Express Group Calendar component of the Oracle Database Server database management system allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Application Express Group Calendar component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

5.5CVSS6.9AI score0.00699EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.8 views

The vulnerability of the Oracle Application Express component of the Oracle Database Server database management system allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Application Express component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information through...

5.5CVSS6.8AI score0.00726EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.7 views

The vulnerability of the Oracle Application Express Data Reporter component of the Oracle Database Server database management system allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Application Express Data Reporter component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

5.5CVSS6.9AI score0.00699EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder