CVE-2020-2624

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Security. The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

How to implement Multi-Factor Authentication (MFA)

Another day, another data breach. If the regular drumbeat of leaked and phished accounts hasn't persuaded you to switch to Multi-Factor Authentication MFA already, maybe the usual January rush of 'back to work' password reset requests is making you reconsider. When such an effective option for...

CVE-2020-2705

CVE-2020-2705 affects Oracle VM VirtualBox (Core) on multiple lines: vulnerable versions include Oracle VM VirtualBox prior to 5.2.36, 6.0.x prior to 6.0.16, and 6.1.x prior to 6.1.2. The advisory notes an easily exploitable vulnerability that lets a low-privilege, logon-allowed attacker compromi...

CVE-2020-2693

CVE-2020-2693 concerns Oracle VM VirtualBox (Core) with affected versions prior to 5.2.36, 6.0.16 and 6.1.2. The vulnerability is characterized as difficult to exploit but can allow a high-privilege attacker with local logon to compromise VirtualBox and potentially access or exfiltrate data acros...

CVE-2020-2668

CVE-2020-2668 affects Oracle iSupport (Oracle E-Business Suite) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The issue allows an unauthenticated attacker with network access over HTTPS to compromise iSupport, with human interaction required. Vulnerability results in potential unauthori...

CVE-2020-2675

CVE-2020-2675 affects Oracle Hospitality OPERA 5 (Oracle Hospitality Applications), specifically the Login component. Affected version is 5.5. The vulnerability allows a low-privilege, network-accessible (HTTP) attacker to compromise OPERA 5, potentially gaining unauthorized access to critical da...

CVE-2020-2671

CVE-2020-2671 affects Oracle E-Business Suite, Oracle Email Center (Message Display) in versions 12.1.1–12.1.3 and 12.2.3–12.2.9. Root cause enables unauthenticated network access via HTTPS to Oracle Email Center, with user interaction required, potentially leading to unauthorized access to sensi...

CVE-2020-2649

The CVE-2020-2649 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) v16.0. The vulnerability is described as allowing a low-privilege attacker with logon to the hosting infrastructure to read a subset of data from the Foundation. Affected component...

CVE-2020-2656

CVE-2020-2656 affects Oracle Solaris (X Window System) on Solaris 10 and 11. It is a local, low-privilege information-disclosure flaw in the Xlock component that can lead to read access to partial data and potential data modification. Mitigation paths in public advisories include applying Solaris...

CVE-2020-2635

CVE-2020-2635 concerns a vulnerability in Oracle Enterprise Manager Base Platform (component: System Monitoring). Connected sources confirm affected versions: 12.1.0.5, 13.2.0.0, and 13.3.0.0. The flaw allows a high-privilege attacker with network access via HTTP to compromise the Base Platform, ...

CVE-2020-2643

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Job System. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-2617

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Discovery Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2608

CVE-2020-2608 affects Oracle Enterprise Manager Base Platform (Repository) with vulnerable versions 13.2.0.0 and 13.3.0.0. The issue allows a high-privilege attacker with network access over HTTP to gain unauthorized access to data across Enterprise Manager Base Platform, plus unauthorized update...

CVE-2020-2611

CVE-2020-2611 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially lead...

CVE-2020-2584

CVE-2020-2584 affects Oracle MySQL Server (component: Server: Options). Affected versions are 5.7.28 and prior, and 8.0.18 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially leading to unauthorized acces...

CVE-2020-2587

CVE-2020-2587 affects Oracle E-Business Suite HR (Hierarchy Diagrammers). Affected: Oracle HRMS in EBS versions 12.1.1–12.1.3 and 12.2.3–12.2.9. Impact: a low-privilege user with network access over HTTPS can compromise Oracle Human Resources, potentially unauthorized creation/deletion/modificati...

CVE-2020-2560

CVE-2020-2560 affects the Oracle Siebel CRM Siebel UI Framework (component: SWSE Server). Connected sources indicate affected versions are 19.10 and earlier. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Siebel UI Framework, with attacks requirin...

PT-2020-1492 · Oracle · Oracle Enterprise Manager Base Platform

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description: The issue is related to a component called Discovery Framework in the Enterprise Manager Base Platform product of Oracle Enterprise Manager. It allows ...