PT-2019-5897 · Python +4 · Python +4

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a CRLF injection vulnerability in the urllib2 module of the Python programming language. This could allow a remote attacker to impact data integrity. Recommendations:...

Unspecified Vulnerability in Oracle Fusion Middleware Web Services

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection, etc. Web Services is one of the Web-based inter-application interaction...

PT-2019-5086

Name of the Vulnerable Software and Affected Versions Loofah gem for Ruby versions through 2.3.0 Description The issue is related to the Loofah gem for Ruby, where unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. This could potentially allow a remote...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-37389)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to unauthorized read, update, insert, or delete data, impacting the confidentiality and...

CVE-2019-2989

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

CVE-2019-2985

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Fluid Core. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-2953

Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications component: Web Service. The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

Design/Logic Flaw

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.017 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-3022

Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite component: Content. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Content...

CVE-2019-3019

CVE-2019-3019 affects Oracle Banking Digital Experience (Loan Calculator) in Oracle Financial Services Applications. Vulnerable versions: 18.1, 18.2, 18.3, 19.1. An attacker with network access via HTTP, low privileges, and requiring user interaction can potentially modify or read Oracle Banking ...

CVE-2019-2994

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

CVE-2019-2971

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2975

CVE-2019-2975 affects Oracle Java SE/Scripting (and Java SE Embedded) with known affected builds: Java SE 8u221, 11.0.4, and 13; Java SE Embedded 8u221. The vulnerability concerns loading/executing untrusted code in environments like sandboxed Web Start/Applet contexts and can allow an unauthenti...

CVE-2019-2958

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

Unspecified Vulnerability in Oracle Hyperion Hyperion Data Relationship Management Component (CNVD-2019-38820)

Oracle Hyperion is a set of financial modeling applications from Oracle Corporation. The software provides financial closure, report production and other functions.Hyperion Data Relationship Management is one of the data relationship management components. An unspecified vulnerability exists in t...

Unspecified Vulnerability in Oracle E-Business Suite Installed Base Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. installed Base is one of the installation base...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37219)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Unspecified Vulnerability in Oracle Hyperion Enterprise Performance Management Architect

Oracle Hyperion is a suite of financial modeling applications from Oracle USA. The software provides financial closure, report production, etc. Hyperion Enterprise Performance Management Architect is one of the performance management architect component. An unspecified vulnerability exists in...