Design/Logic Flaw

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety...

Design/Logic Flaw

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2018-3311

Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications subcomponent: Security. The supported version that is affected is 3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Payment...

CVE-2019-2546

CVE-2019-2546 affects Oracle E-Business Suite, specifically the Applications Manager SQL Extensions component. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manag...

CVE-2019-2430

Summary: CVE-2019-2430 applies to Oracle Argus Safety (Oracle Health Sciences Applications), specifically the Console subcomponent, with affected versions 8.1 and 8.2. An attacker with network access can exploit this vulnerability over HTTP with low privileges to gain unauthorized access to data ...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3125

CVE-2018-3125 affects Oracle Retail Merchandising System (Oracle Retail Applications), specifically the Security (SQL Logger) subcomponent. Affected version 14.1 is vulnerable to unauthenticated HTTP access that can lead to unauthorized read, update, insert, or delete operations on Oracle Retail ...

CVE-2019-2431

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2019-2432

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Login. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2019-2403

CVE-2019-2403 affects the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications, specifically version 2.10 . The vulnerability enables an unauthenticated, network-accessible attacker (via HTTP) to potentially perform unauthorized updates, inserts, or deletes to Oracle Sim...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2403

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful...

CVE-2019-2431

CVE-2019-2431 affects Oracle Argus Safety, specifically the Console subcomponent, in versions 8.1 and 8.2 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise Argus Safety, with exploitation requiring human interaction. The vulnerability can enable unauthorized...

CVE-2019-2402

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

CVE-2019-2407

The CVE-2019-2407 entry pertains to Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications, affected version 9.1.0. The vulnerability is exploitable by a low-privilege attacker with Report privileges who can log on to the infrastructure hosting the component, potentia...

CVE-2019-2401

CVE-2019-2401 affects Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications (affected version 9.1.0). The vulnerability allows a low-privileged admin with network access via HTTP to compromise data, enabling unauthorized creation, deletion, or modification of critica...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2401

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...