CVE-2020-2619

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2611

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2603

CVE-2020-2603 affects Oracle E-Business Suite, Oracle Field Service (Wireless) components. Affects 12.1.1–12.1.3 and 12.2.3–12.2.9. Vulnerability allows an unauthenticated attacker over HTTPS to compromise Field Service; exploitation requires user interaction and may lead to unauthorized read and...

CVE-2020-2618

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2623

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metrics Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2623

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metrics Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2615

Oracle Enterprise Manager Base Platform (Enterprise Manager) contains CVE-2020-2615 affecting the Oracle Management Service component. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, potentially lea...

CVE-2020-2622

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2601

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2585

Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2020-2582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iStore...

CVE-2020-2582

CVE-2020-2582 affects Oracle E-Business Suite iStore (Shopping Cart) and is confirmed in connected sources as affecting 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated network access via HTTPS to Oracle iStore, with user interaction required for exploitation, leading to ...

CVE-2020-2541

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2548

CVE-2020-2548 affects Oracle WebLogic Server 10.3.6.0.0 (WLS Core Components). The vulnerability allows a high-privileged attacker with network access via HTTP to compromise WebLogic Server, with required user interaction and potential unauthorized update/insert/delete and read access. Root cause...

CVE-2020-2550

CVE-2020-2550 affects Oracle WebLogic Server (WLS Core Components) and is associated with versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability arises from insufficient access control in the WLS Core Components, enabling a locally authenticated attacker with logon to the i...

CVE-2020-2536

CVE-2020-2536 pertains to Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology code (product family noted as part of the Outside In SDKs); vulnerable version cited as 8.5.4. Access: unauthenticated attacker...

CVE-2020-2536

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

PT-2020-1521 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.0 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.16.0 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-1423 · Oracle · Oracle Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description: The issue is related to a component of the Enterprise Manager Base Platform product, specifically the Connector Framework, and is associated with inadequate access...

CVE-2018-3286

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...