CVE-2020-2896

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-2902

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2894

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2899

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft component: Purchasing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...

CVE-2020-2904

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-2904

CVE-2020-2904 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions: 8.0.19 and earlier. The issue enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (complete DoS) of MySQL Server. The connected sources indicate ...

CVE-2020-2905

CVE-2020-2905 concerns the Oracle VM VirtualBox core vulnerability. Affected products/versions are Oracle VM VirtualBox prior to 5.2.40, 6.0.20, and 6.1.6. The issue allows a high-privilege attacker who has logon to the infrastructure where VirtualBox runs to compromise the VirtualBox core, with ...

CVE-2020-2904

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-2905

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2871

CVE-2020-2871 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (UI component). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable over HTTP with network access and authenticated? no, it states unauthenticated attacker with network access; ex...

CVE-2020-2880

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: OTA Training Activities. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2874

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Customer Search. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successf...

CVE-2020-2853

Summary of CVE-2020-2853 (MySQL) : In Oracle MySQL Server, a vulnerability in the Server: Security: Privileges component affects 8.0.18 and earlier, enabling a highly privileged attacker with network access (via multiple protocols) to trigger a hang or crash of MySQL Server (denial of service). T...

CVE-2020-2852

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Calendar. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2829

CVE-2020-2829 affects Oracle WebLogic Server (Fusion Middleware), specifically the Management Services component in version 10.3.6.0.0. The vulnerability enables a high-privilege attacker with network access over HTTP to compromise WebLogic Server, potentially exposing or breaching data. Public r...

CVE-2020-2830

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Concurrency. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multipl...

CVE-2020-2837

The CVE-2020-2837 entry describes a vulnerability in Oracle Marketing (component: Marketing Administration) within Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing, with attacks ...

CVE-2020-2835

CVE-2020-2835 affects Oracle E-Business Suite, Marketing Administration (12.1.1–12.1.3). The vulnerability allows unauthorized access/update/delete of Oracle Marketing data via HTTP with network access; exploitation is network-accessible and requires user interaction, per CVSS/description. Oracle...

CVE-2020-2839

CVE-2020-2839 affects Oracle E-Business Suite’s Oracle Service Intelligence (Internal Operations- Search) with affected versions 12.1.1–12.1.3. The vulnerability enables unauthenticated attackers to access Oracle Service Intelligence over HTTP; successful exploitation requires user interaction, a...

CVE-2020-2814

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...