5249 matches found
CVE-2020-14819
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillmen...
CVE-2020-14831
CVE-2020-14831 affects Oracle Marketing within Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing, with impact to confidentiality and integrity as indica...
CVE-2020-14833
CVE-2020-14833 affects Oracle E-Business Suite Trade Management (User Interface). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP with network access and unauthenticated access, with user interaction required for exploitation, potentially leading...
CVE-2020-14816
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14808
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
CVE-2020-14805
Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite component: Search Integration Engine. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access...
CVE-2020-14816
CVE-2020-14816 affects Oracle E-Business Suite Marketing Administration. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP by an unauthenticated remote attacker and requires user interaction for exploitation, potentially leading to unauthorized acc...
CVE-2020-14815
CVE-2020-14815 affects Oracle BI Enterprise Edition Analytics Actions. Affected: OBIEE versions 5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0. Root cause: insufficient input validation in Analytics Actions. Consequences: unauthenticated network access via HTTP can lead to unauthorized data disclosure and pos...
CVE-2020-14808
CVE-2020-14808 affects Oracle E-Business Suite Trade Management (UI) on versions 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker can exploit over HTTP to access or modify data, with user interaction required. CVSS v3.1 base score 8.2 (C:H, I:L) indicating high confidentiality impact and lo...
CVE-2020-14802
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2020-14792
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2020-14784
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
CVE-2020-14792
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2020-14731
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2020-14886: Undefined Security Weakness
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2020-14815: Undefined Security Weakness
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
PT-2020-4483
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Marketing Administration component of Oracle Marketing. It...
PT-2020-4431
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The vulnerability in the Oracle Trade Management product of Oracle E-Business Suite is related to insufficient input...
PT-2020-4489
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.2 and 8.11 through 8.14 Description The issue is related to insufficient input validation in the WebConnect component of Oracle Hospitality Suite8, allowing an unauthenticated attacker with network acces...
PT-2020-4572
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the BI Publisher Security component. It allows an unauthenticated attacker with...