CVE-2020-2810

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

Design/Logic Flaw

Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2868

CVE-2020-2868 affects Oracle PeopleSoft Enterprise PeopleTools Diagnostic Framework in versions 8.56–8.58. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise PeopleSoft PeopleTools, potentially enabling unauthorized read, update, insert, or delete of ...

CVE-2020-2869

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2849

CVE-2020-2849 affects Oracle E-Business Suite – Depot Repair, component Estimate and Actual Charges (versions 12.1.1–12.1.3). An unauthenticated attacker with network access via HTTP can compromise Depot Repair; attacks may impact additional products and lead to unauthorized access, and unauthori...

CVE-2020-2854

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2782

CVE-2020-2782 concerns Oracle PeopleSoft Enterprise PeopleTools – Query component. Affected versions are 8.56, 8.57, and 8.58. The vulnerability is exploitable with network access via HTTP and unauthenticated access, with user interaction required for successful attacks. Impact as described inclu...

CVE-2020-2744

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

Unspecified Vulnerability in Oracle E-Business Suite Depot Repair (CNVD-2020-36243)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An unspecified vulnerability exists in Oracle...

CVE-2020-2885: Undefined Security Weakness

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle E-Business Suite Depot Repair (CNVD-2020-36240)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An unspecified vulnerability exists in Oracle...

PT-2020-2178

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to a lack of protection for internal data in the Oracle CRM Technical Foundation product. It allows an unauthenticated attacker with network access via HTT...

Unspecified Vulnerability in Oracle E-Business Suite E-Business Intelligence (CNVD-2020-38205)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. E-Business Intelligence is one of the business intelligence...

Unspecified Vulnerability in Oracle E-Business Suite One-to-One Fulfillment (CNVD-2020-38194)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

CVE-2020-2800

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

CVE-2020-6214

SAP S/4HANA Financial Products Subledger, version 100, uses an incorrect authorization object in some reports. Although the affected reports are protected with other authorization objects, exploitation of the vulnerability would allow an authenticated attacker to view, change, or delete data,...

Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries. An attacker could then install programs; view, change, or delete data with the logged in user's privileges. To exploit this vulnerability, an attacker would first...

PT-2020-2316

Name of the Vulnerable Software and Affected Versions Oracle Service Intelligence versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the Internal Operations- Search component of Oracle Service Intelligence. It allows a remote attacker to gain...

The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...