Small Businesses Tapping COVID-19 Loans Hit with Data Exposure

A data breach at the agency in charge of providing financial relief to small businesses during the COVID-19 crisis may have exposed sensitive information of 8,000 business that applied, and may delay payouts, a government official said. The Small Business Administration SBA, which oversees the...

metatraderdemo.net IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1146257 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting metatraderdemo.net website and its users. Following...

sws-georgenthal.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145282 Security Researcher Hchabik Helped patch 2424 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting sws-georgenthal.de website...

'Double Extortion' Ransomware Attacks Spike

Victims of ransomware attacks now face a double whammy of headaches. Cybercriminals are increasingly inflicting more pain on ransomware victims by threatening to leak compromised data or use it in future spam attacks, if ransom demands aren’t met. The ransomware tactic, call “double extortion,”...

CVE-2020-2834

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2956

CVE-2020-2956 affects Oracle E-Business Suite Human Resources, Hierarchy Diagrammers (and related Hierarchy Viewer components). Connected advisories describe an SQL injection/unsafe input handling in the Position Hierarchy Viewer and Organization Hierarchy Viewer that can lead to unauthorized dat...

CVE-2020-2946

Vulnerability in the Application Performance Management product of Oracle Enterprise Manager component: EM Request Monitoring. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2890

The CVE-2020-2890 entry concerns Oracle E-Business Suite’s Oracle Applications Framework (Diagnostics). Affected are 12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated remote attacker, over HTTP, to compromise the Oracle Applications Framework. Attacks require human interaction and can ...

CVE-2020-2880

CVE-2020-2880 affects Oracle E-Business Suite Oracle Learning Management (OTA Training Activities). Vulnerable versions: 12.1.1–12.1.3 and 12.2.3–12.2.9. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Learning Management; attacks may grant unauthor...

CVE-2020-2873

CVE-2020-2873 affects Oracle E-Business Suite, Oracle Customer Interaction History (component: Outcome-Result). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise Oracle Customer Interaction Hist...

CVE-2020-2879

CVE-2020-2879 affects Oracle E-Business Suite, Oracle Scripting (component: Miscellaneous). Affected are versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Scripting, potentially leading to unauthorized...

CVE-2020-2881

CVE-2020-2881 affects Oracle E-Business Suite, Oracle CRM Technical Foundation (component: Preferences). Affected versions: 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the CRM Technical Foundation; attacks require user interaction...

CVE-2020-2860

The CVE-2020-2860 entry concerns Oracle E-Business Suite’s Oracle Marketing (Marketing Administration) vulnerability affecting 12.1.1–12.1.3. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing, with attacks requiring user interaction. The impac...

CVE-2020-2834

CVE-2020-2834 is a vulnerability in the Oracle Marketing component (Marketing Administration) of Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can compromise Oracle Marketing, with attacks requiring human interaction. The vu...

CVE-2020-2837

The CVE-2020-2837 entry describes a vulnerability in Oracle Marketing (component: Marketing Administration) within Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing, with attacks ...

CVE-2020-2796

CVE-2020-2796 affects Oracle E-Business Suite Email Center, component Message Display. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated, remote HTTP access to compromise Oracle Email Center, with user interaction required and potential unauthorized a...

CVE-2020-2744

CVE-2020-2744 affects Oracle Transportation Management (Oracle Supply Chain) Security component in versions 6.3.7, 6.4.2 and 6.4.3. The vulnerability enables an attacker with network access over HTTP and low privileges to compromise data, including unauthorized read and (potentially) update/inser...

CVE-2020-2741

CVE-2020-2741 affects Oracle VM VirtualBox (Core) with affected releases before 5.2.40, 6.0.20 and 6.1.6. The vulnerability allows a high-privilege user who can log on to the host infrastructure running VirtualBox to potentially compromise VirtualBox and, per sources, may lead to unauthorized acc...

Oracle HTTP Server Remote Code Execution Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection and other functions. HTTP Server is one of the HTTP server component. A security vulnerability exist...