CVE-2019-2857

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2019-2857

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2019-2853

CVE-2019-2853 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Connected documents confirm the vulnerability affects Outside In Filters in version 8.5.4, allowing unauthenticated, network-based (HTTP) access that can lead to unauthorized read/update/ins...

CVE-2019-2859

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2840

CVE-2019-2840 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.0.1–12.0.3, 12.1.0–12.4.0 and 14.0.0–14.2.0. A low-privilege attacker who can reach the system over HTTP can exploit this vulnerability, and user interaction is required. Successful exploitation can...

CVE-2019-2848

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2827

CVE-2019-2827 affects Oracle WebLogic Server (WLS Core Components) with affected versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The issue is a directory traversal flaw exploitable over HTTP by a high-privilege attacker, potentially leading to unauthorized data access and unauthorized data modificat...

CVE-2019-2830

CVE-2019-2830 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions are 8.0.16 and earlier. The vulnerability can be exploited by a high-privilege attacker who can network-access the server via multiple protocols, potentially causing a hang or a c...

CVE-2019-2832

CVE-2019-2832 affects Oracle Solaris 10, specifically the Common Desktop Environment subcomponent. The vulnerability is documented as a local, user-privilege–level issue that could allow a low-privilege attacker with logon to compromise Solaris, with potential takeover of the affected host. The C...

CVE-2019-2815

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2019-2823

The CVE-2019-2823 entry concerns Oracle Financial Services Applications Infrastructure (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 8.0.5–8.0.8. The vulnerability allows a low-privileged attacker who can access over HTTP via the network to cause ...

CVE-2019-2811

CVE-2019-2811 is a MySQL Server vulnerability (subcomponent: Security: Privileges). The initial description notes affected versions are 8.0.16 and prior, with an attacker who has network access via multiple protocols being able to exploit the issue to cause a hang or crash (DoS) of MySQL Server. ...

CVE-2019-2798

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2019-2801

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: FTS. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-2808

CVE-2019-2808 affects Oracle MySQL Server (Server: Optimizer). The connected advisories show vulnerable versions include 8.0.16 and earlier; exploitation can allow a high-privilege attacker with network access via multiple protocols to cause a hang or a full crash (DoS) of MySQL Server. Remediati...

CVE-2019-2805

Removed by vendor...

CVE-2019-2785

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2019-2791

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2019-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Activity Guide. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2770

CVE-2019-2770 affects Oracle Hyperion Planning Smart View (subcomponent) with vulnerable version 11.1.2.4. The vulnerability allows a high-privileged attacker who has network access via HTTP and must involve user interaction to compromise Hyperion Planning, potentially resulting in unauthorized a...