CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

Buffer overflow

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Buffer overflow

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Security. The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

Buffer overflow

Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. Supported versions that are affected are 3.7 and 3.8. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality Suites Management. Successful attacks of thi...

Buffer overflow

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

Design/Logic Flaw

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2020-2713

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-2717

CVE-2020-2717 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affects versions 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise data; attacks require user interaction. P...

CVE-2020-2714

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-2719

CVE-2020-2719 affects Oracle Banking Corporate Lending (Core) in Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. An attacker with network access over HTTP and low privileges can read a subset of data due to an underlying vulnerability in the Core com...

CVE-2020-2721

CVE-2020-2721 describes a vulnerability in Oracle FLEXCUBE Investor Servicing (Infrastructure). Affected versions are 12.1.0-12.4.0 and 14.0.0-14.1.0. The issue allows a low-privileged attacker who can access the system over HTTP to compromise Oracle FLEXCUBE Investor Servicing, potentially leadi...

CVE-2020-2716

The CVE-2020-2716 entry concerns Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables a low-privileged, network-accessible attacker to compromise the system via HTTP, potentially lea...

CVE-2020-2722

Oracle FLEXCUBE Investor Servicing (Infrastructure) is affected in versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The issue relates to inadequate access controls, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized upd...