CVE-2020-2967

CVE-2020-2967 affects Oracle WebLogic Server (Oracle Fusion Middleware) – Web Services component. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. Exploitation via network protocols IIOP/T3 allows unauthenticated access, potentially resulting in unauthorized access t...

CVE-2020-2971

CVE-2020-2971 affects Oracle Application Express within Oracle Database Server (versions 5.1–19.2). The vulnerability allows a low-privileged attacker with SQL Workshop privilege and network access via HTTP to compromise APEX. Attacks require human interaction, and the impact can include unauthor...

CVE-2020-2976

CVE-2020-2976 affects Oracle Database Server’s Oracle Application Express (APEX) component. Affected versions are 5.1–19.2. The vulnerability allows a low-privileged attacker with SQL Workshop privilege and HTTP network access to compromise APEX. Exploitation requires user interaction and can lea...

CVE-2020-2982

CVE-2020-2982 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) on Oracle Enterprise Manager, with affected versions 13.3.0.0 and 13.4.0.0. The referenced vulnerability allows a low-privilege, network-accessing attacker over HTTP to compromise the Base Platform, poten...

CVE-2020-2973

CVE-2020-2973 affects Oracle Database Server’s Oracle Application Express component. Affected versions are 5.1–19.2. The vulnerability allows a low-privileged attacker with SQL Workshop privilege and HTTP network access to influence Oracle Application Express, with user interaction required. Impa...

CVE-2020-14720

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite component: Mobile Expenses Admin Utilities. Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14718

CVE-2020-14718 affects Oracle GraalVM Enterprise Edition (JVMCI) with confirmed impact on versions 19.3.2 and 20.1.0. The vulnerability, described as permitting a high-privileged attacker with network access via multiple protocols to compromise GraalVM, can lead to takeover of the enterprise prod...

CVE-2020-14696

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14686

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport...

CVE-2020-14704

CVE-2020-14704 affects Oracle VM VirtualBox (Core). Vulnerable in: VirtualBox 5.2.x before 5.2.44, 6.0.x before 6.0.24, and 6.1.x before 6.1.12. The issue allows a high-privilege attacker with logon to compromise VirtualBox and potentially access all data within VirtualBox-usable data; attacks ma...

CVE-2020-14704

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14703

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14668

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: DBI Setups. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business...

CVE-2020-14680

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14678

CVE-2020-14678 affects the MySQL Server component “Server: Security: Privileges” in Oracle MySQL. Affected versions are 8.0.20 and prior. The exploit requires network access via multiple protocols and a high-privilege attacker can compromise and take over the MySQL Server. Public advisories align...

CVE-2020-14662

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14651

CVE-2020-14651 affects MySQL Server (Oracle MySQL), component Server: Security: Roles. Affected versions are 8.0.20 and earlier. An attacker with high privileges who can access the server over the network via multiple protocols can cause a hang or crash (DOS) and may gain unauthorized update/inse...

CVE-2020-14663

CVE-2020-14663 affects Oracle MySQL Server (component: Server: Security: Privileges). Affected: MySQL 8.0.20 and earlier. Root cause: privilege escalation through the Server security subsystem allowing a high-privilege attacker to compromise the MySQL Server over network via multiple protocols. I...

CVE-2020-14632

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

CVE-2020-14643

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...