Design/Logic Flaw

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: DBI Setups. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM...

Code injection

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-2983

The CVE-2020-2983 entry describes a vulnerability in Oracle Data Masking and Subsetting (Oracle Enterprise Manager), specifically in the Data Masking component. Affected are Oracle Enterprise Manager versions 13.3.0.0 and 13.4.0.0. The flaw permits a low-privileged attacker with network access vi...

CVE-2020-2513

CVE-2020-2513 affects Oracle Application Express (APEX) within Oracle Database Server, affecting 5.1–19.2. The vulnerability can be exploited by a low-privileged user with SQL Workshop privilege over HTTP, requiring user interaction, to read and modify APEX data and potentially read restricted da...

CVE-2020-2975

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-2982

CVE-2020-2982 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) on Oracle Enterprise Manager, with affected versions 13.3.0.0 and 13.4.0.0. The referenced vulnerability allows a low-privilege, network-accessing attacker over HTTP to compromise the Base Platform, poten...

CVE-2020-2976

CVE-2020-2976 affects Oracle Database Server’s Oracle Application Express (APEX) component. Affected versions are 5.1–19.2. The vulnerability allows a low-privileged attacker with SQL Workshop privilege and HTTP network access to compromise APEX. Exploitation requires user interaction and can lea...

CVE-2020-2973

CVE-2020-2973 affects Oracle Database Server’s Oracle Application Express component. Affected versions are 5.1–19.2. The vulnerability allows a low-privileged attacker with SQL Workshop privilege and HTTP network access to influence Oracle Application Express, with user interaction required. Impa...

CVE-2020-2971

CVE-2020-2971 affects Oracle Application Express within Oracle Database Server (versions 5.1–19.2). The vulnerability allows a low-privileged attacker with SQL Workshop privilege and network access via HTTP to compromise APEX. Attacks require human interaction, and the impact can include unauthor...

CVE-2020-2967

CVE-2020-2967 affects Oracle WebLogic Server (Oracle Fusion Middleware) – Web Services component. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. Exploitation via network protocols IIOP/T3 allows unauthenticated access, potentially resulting in unauthorized access t...

CVE-2020-14718

CVE-2020-14718 affects Oracle GraalVM Enterprise Edition (JVMCI) with confirmed impact on versions 19.3.2 and 20.1.0. The vulnerability, described as permitting a high-privileged attacker with network access via multiple protocols to compromise GraalVM, can lead to takeover of the enterprise prod...

CVE-2020-14720

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite component: Mobile Expenses Admin Utilities. Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14696

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14686

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport...

CVE-2020-14704

CVE-2020-14704 affects Oracle VM VirtualBox (Core). Vulnerable in: VirtualBox 5.2.x before 5.2.44, 6.0.x before 6.0.24, and 6.1.x before 6.1.12. The issue allows a high-privilege attacker with logon to compromise VirtualBox and potentially access all data within VirtualBox-usable data; attacks ma...

CVE-2020-14704

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14703

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14680

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14678

CVE-2020-14678 affects the MySQL Server component “Server: Security: Privileges” in Oracle MySQL. Affected versions are 8.0.20 and prior. The exploit requires network access via multiple protocols and a high-privilege attacker can compromise and take over the MySQL Server. Public advisories align...