9454 matches found
CVE-2020-14898
Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...
CVE-2020-14898
CVE-2020-14898 affects Oracle Database Server’s Oracle Application Express Packaged Apps (APEX) prior to version 20.2. The issue allows a low-privilege user with a valid account and network access via HTTP to interact with a vulnerable APEX Packaged Apps component, potentially resulting in unauth...
CVE-2020-14893
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14893
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14881
CVE-2020-14881 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 6.1.16. The issue allows a high-privilege attacker with logon to compromise VirtualBox, with potential unauthorized access to sensitive data and impact on related products. Remediation per Gentoo/Mageia advisorie...
CVE-2020-14889
CVE-2020-14889 affects Oracle VM VirtualBox (Core) with versions prior to 6.1.16. The vulnerability enables a high-privilege attacker with local access to compromise VirtualBox, with potential to access sensitive data or broader VirtualBox data. Multiple connected sources corroborate the affected...
CVE-2020-14893
CVE-2020-14893 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. An attacker with network access via multiple protocols and high privileges can cause a hang or frequent crashes (DoS) of MySQL Server. Public details confirm vulnerability scope and impact as descr...
CVE-2020-14865
Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection product of Oracle PeopleSoft component: eSupplier Connection. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2020-14864
CVE-2020-14864 affects Oracle BI Enterprise Edition (OBIEE) under the Fusion Middleware Installation component. A Directory Traversal/Local File Inclusion in the getPreviewImage function lets an authenticated attacker with access to the admin interface read arbitrary system files via the previewF...
CVE-2020-14868
CVE-2020-14868 affects Oracle MySQL Server (Server: Optimizer) and is associated with MySQL 8.0.21 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to trigger a hang or frequent crash (Denial of Service) in MySQL Server. The connected mat...
CVE-2020-14865
Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection product of Oracle PeopleSoft component: eSupplier Connection. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2020-14866
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14870
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14846
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14848
CVE-2020-14848 affects MySQL Server (Oracle MySQL), specifically the InnoDB component. Affected products/versions: MySQL 8.0.21 and earlier. Description from connected docs: an authenticated attacker with network access via multiple protocols can exploit this to trigger a hang or a frequently rep...
CVE-2020-14839
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14845
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-14841
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to...
CVE-2020-14850
The CVE-2020-14850 entry covers an Oracle E-Business Suite vulnerability in the CRM Technical Foundation (Flex Fields). Affected versions are 12.1.3 and 12.2.3–12.2.10. The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation, with su...
CVE-2020-14846
CVE-2020-14846 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Described as an easily exploitable issue where a low-privilege attacker with network access via multiple protocols can cause the server to hang or crash (DoS). CVSS v3.1 base score 6.5 (...