Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Components / Services. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

Code injection

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2019-2801

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: FTS. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Buffer overflow

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gif...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2019-2877

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2867

CVE-2019-2867 affects Oracle VM VirtualBox (Core) with vulnerable releases prior to 5.2.32 and prior to 6.0.10. The issue is exploitable by a high-privilege attacker who can log on to the infrastructure running VirtualBox, potentially leading to takeover of VirtualBox (local access, high impact)....

CVE-2019-2874

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2853

CVE-2019-2853 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Connected documents confirm the vulnerability affects Outside In Filters in version 8.5.4, allowing unauthenticated, network-based (HTTP) access that can lead to unauthorized read/update/ins...

CVE-2019-2857

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2019-2859

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2857

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2019-2840

CVE-2019-2840 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.0.1–12.0.3, 12.1.0–12.4.0 and 14.0.0–14.2.0. A low-privilege attacker who can reach the system over HTTP can exploit this vulnerability, and user interaction is required. Successful exploitation can...

CVE-2019-2848

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2832

CVE-2019-2832 affects Oracle Solaris 10, specifically the Common Desktop Environment subcomponent. The vulnerability is documented as a local, user-privilege–level issue that could allow a low-privilege attacker with logon to compromise Solaris, with potential takeover of the affected host. The C...

CVE-2019-2830

CVE-2019-2830 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions are 8.0.16 and earlier. The vulnerability can be exploited by a high-privilege attacker who can network-access the server via multiple protocols, potentially causing a hang or a c...

CVE-2019-2827

CVE-2019-2827 affects Oracle WebLogic Server (WLS Core Components) with affected versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The issue is a directory traversal flaw exploitable over HTTP by a high-privilege attacker, potentially leading to unauthorized data access and unauthorized data modificat...

CVE-2019-2823

The CVE-2019-2823 entry concerns Oracle Financial Services Applications Infrastructure (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 8.0.5–8.0.8. The vulnerability allows a low-privileged attacker who can access over HTTP via the network to cause ...

CVE-2019-2815

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...