CVE-2020-2536

CVE-2020-2536 pertains to Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology code (product family noted as part of the Outside In SDKs); vulnerable version cited as 8.5.4. Access: unauthenticated attacker...

CVE-2020-2582: Undefined Security Weakness

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iStore...

CVE-2020-2697: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. Supported versions that are affected are 3.7 and 3.8. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality Suites Management. Successful attacks of thi...

CVE-2020-2699: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2713: Undefined Security Weakness

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-2585: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2020-2673: Undefined Security Weakness

Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Oracle Flow Builder. Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2550: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2020-2653: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2601: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2020-1464

Name of the Vulnerable Software and Affected Versions Oracle Web Applications Desktop Integrator version 12.1.3 Description The issue is related to inadequate access control in the Application Service component of Oracle Web Applications Desktop Integrator. This easily exploitable vulnerability...

PT-2020-1581

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite versions 12.5.0.3 through 13.3.0.1 Description The issue is related to inadequate access control in the Oracle Flow Builder component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-1423 · Oracle · Oracle Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description: The issue is related to a component of the Enterprise Manager Base Platform product, specifically the Connector Framework, and is associated with inadequate access...

PT-2020-1521 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.0 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.16.0 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-1418

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Others versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Others versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product,...

PT-2020-1413

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-1349

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suites Management versions 3.7 through 3.8 Description The issue is related to inadequate access control in the Oracle Hospitality Suites Management component, allowing for physical access to compromise the system. Successfu...

CVE-2018-3286

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2019-2922

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Privileged Identity Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Security Privileged Identity Manager ISPIM. Vulnerability Details CVEID: CVE-2019-11775 DESCRIPTION: All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize ...