CVE-2020-14660

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM...

CVE-2020-14566

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2020-14564

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Environment Mgmt Console. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-14528

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Design/Logic Flaw

Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite component: Setup of Mobile Applications. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Design/Logic Flaw

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: SWSE Server. Supported versions that are affected are 20.6 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2020-2982

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2977

CVE-2020-2977 affects Oracle Database Server via the Application Express (APEX) component. Affected: APEX versions 5.1–19.2. The vulnerability is exploitable by a low-privilege user with a Valid User Account, who can access the server over HTTP and requires user interaction. Consequences include ...

CVE-2020-2966

CVE-2020-2966 affects Oracle WebLogic Server Console in 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can compromise WebLogic Server; exploitation requires user interaction and can lead to unauthorized update/insert/delete and read acc...

CVE-2020-14708

CVE-2020-14708 is a vulnerability in Oracle’s Customer Management and Segmentation Foundation (Segment component). Affected are Oracle Retail Applications versions 16.0, 17.0 and 18.0. An attacker with network access via HTTP and with low privileges can exploit this to perform unauthorized update...

CVE-2020-14682

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

CVE-2020-14684

CVE-2020-14684 affects Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) in Oracle Financial Services Applications. Affected versions are 8.0.6–8.1.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the infr...

CVE-2020-14667

CVE-2020-14667 affects Oracle E-Business Suite, Oracle CRM Technical Foundation (component: Preferences). Affected versions: 12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable from the network via HTTP by a low-privilege user, with user interaction required, and may allow unauthorized acc...

CVE-2020-14658

CVE-2020-14658 affects the Oracle E-Business Suite Marketing Administration component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated, network-accessible attacker via HTTP can compromise Oracle Marketing, potentially causing unauthorized creation, deletion or modificati...

CVE-2020-14652

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14661

CVE-2020-14661 affects Oracle E-Business Suite – Oracle CRM Technical Foundation (component: Preferences). Affected versions are 12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated attackers to access the system over HTTP, with user interaction required, and can lead to unauthorize...

CVE-2020-14610

The CVE-2020-14610 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Applications Framework (OA Framework), specifically in the Attachments / File Upload component. Affected product/version is Oracle E-Business Suite OA Framework with version 12.2.9. The flaw is exploitable over...

CVE-2020-14613

CVE-2020-14613 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Advanced User Interface component. Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites; exploitation requires user i...

CVE-2020-14607

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...