CVE-2020-14809

CVE-2020-14809 affects Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.21 and earlier. The issue allows a high-privileged attacker who can reach the server over multiple network protocols to cause a hang or frequent crash (DoS) in MySQL Server. The provided documents do not spe...

CVE-2020-14803

Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

CVE-2020-14813

CVE-2020-14813 affects Oracle PeopleSoft Enterprise PeopleTools PIA Grids in versions 8.56–8.58. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft PeopleTools, with the attack requiring user interaction and potentially leading to unauthoriz...

CVE-2020-14806

CVE-2020-14806 affects Oracle PeopleSoft Enterprise PeopleTools (Query component) in versions 8.56, 8.57, and 8.58. The vulnerability can be triggered by an unauthenticated, network-accessing attacker over HTTP, resulting in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTool...

CVE-2020-14812

Disclaimer: This data contains information about vulnerable...

CVE-2020-14790

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-14795

CVE-2020-14795 affects Oracle PeopleSoft Enterprise PeopleTools PIA Core Technology (validated on PeopleSoft 8.57 and 8.58). The vulnerability enables unauthenticated remote access via HTTP, with user interaction required, potentially leading to unauthorized access to sensitive data or complete a...

CVE-2020-14794

Removed by vendor...

CVE-2020-14790

Removed by vendor...

CVE-2020-14785

Removed by vendor...

CVE-2020-14777

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14777

Oracle MySQL Server vulnerability CVE-2020-14777 affects the Server: Optimizer in MySQL 8.0.21 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (DoS). Affected product/version details are supported in connected documents...

CVE-2020-14776

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-14773

Removed by vendor...

CVE-2020-14776

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-14774

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2020-14763

CVE-2020-14763 affects Oracle Database Server’s Application Express Quick Poll component, with the affected version being prior to 20.2. A low-privileged attacker with a valid user account and network access via HTTP can compromise Quick Poll, with successful attacks potentially leading to unauth...

CVE-2020-14777

Removed by vendor...

CVE-2020-14741

Vulnerability in the Database Filesystem component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Resource, Create Table, Create View, Create Procedure, Dbfsrole privilege...

CVE-2020-14741

CVE-2020-14741 is a vulnerability in the Oracle Database Server’s Database Filesystem component affecting Oracle versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. An attacker with high privileges (Resource, Create Table, Create View, Create Procedure, Dbfs_role) and network access via Oracle Net can cau...