CVE-2020-2718

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2710

Oracle Banking Payments (Oracle Financial Services Applications, Core) is affected in versions 14.1.0–14.3.0. A low-privilege, network-based attacker with HTTP access can compromise data confidentiality and integrity. CVSSv3.0 base score is 5.4 (C:L, I:L; A:N; PR:L; AV:N). The connected documents...

CVE-2020-2720

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2713

CVE-2020-2713 affects the Oracle Banking Payments product (Oracle Financial Services Applications), specifically the Core component, with affected versions 14.1.0–14.3.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Banking Payments, poten...

CVE-2020-2709

The CVE-2020-2709 vulnerability affects Oracle iLearning 6.1, specifically the Learner Pages component. It is exploitable over HTTP by an unauthenticated attacker with network access; however, successful exploitation requires user interaction (UI:R) and can lead to unauthorized update/insert/dele...

CVE-2020-2712

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking...

CVE-2020-2699

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2699

CVE-2020-2699 affects Oracle FLEXCUBE Universal Banking (component: Infrastructure). Vulnerable versions: 12.0.1–12.4.0 and 14.0.0–14.3.0. Low-privileged attacker with network access via HTTP can compromise Oracle FLEXCUBE Universal Banking, potentially leading to unauthorized access to critical ...

CVE-2020-2690

CVE-2020-2690 affects Oracle VM VirtualBox (Core) with updates before 5.2.36, 6.0.16, and 6.1.2. The issue allows a low-privileged, local attacker with logon to the infrastructure where VirtualBox runs to compromise the VirtualBox environment, potentially leading to unauthorized access to confide...

CVE-2020-2700

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2689

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2678

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-2675

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Login. The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

CVE-2020-2676

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Printing. The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

CVE-2020-2665

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2672

CVE-2020-2672 affects Oracle E-Business Suite’s Oracle Email Center (component: Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable by an unauthenticated attacker with network access over HTTPS and requires user interaction from a person other...

CVE-2020-2678

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-2644

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...

CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2658

CVE-2020-2658 concerns Oracle E-Business Suite’s Oracle iSupport component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access over HTTPS to compromise iSupport, with exploitation requiring human interaction from a user ...