CVE-2020-2673

CVE-2020-2673 affects Oracle Application Testing Suite (Oracle Flow Builder) with affected versions 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. The vulnerability allows an unauthenticated attacker over HTTP to access critical data or take full control of the Oracle ATS exposed data, per CVSSv3.0 b...

CVE-2020-2646

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Command Line Interface. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2648

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows physical access to compromise Oracle Retail Customer...

CVE-2020-2648

CVE-2020-2648 concerns Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) 16.0. The vulnerability affects the product’s Internal Operations component; exploitation requires physical access and can lead to takeover of the Oracle Retail Foundation per CVSS 3.0 (Vect...

CVE-2020-2645

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2663

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2020-2660

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2020-2646

Oracle CVE-2020-2646 affects Enterprise Manager Base Platform, Command Line Interface component, with vulnerable versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify and read data after user interaction; base impact...

CVE-2020-2641

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Discovery Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...

CVE-2020-2641

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Discovery Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...

CVE-2020-2640

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Target Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2626

CVE-2020-2626 affects Oracle Enterprise Manager Cloud Control Manager – OMS within the Enterprise Manager Base Platform. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Base Platform, poten...

CVE-2020-2640

CVE-2020-2640 affects Oracle Enterprise Manager for Oracle Database (Target Management component). Vulnerable are versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a high-privilege attacker who can reach the service over HTTP to compromise the Enterprise Manager, potentially gai...

CVE-2020-2631

CVE-2020-2631 affects Oracle Enterprise Manager Base Platform (component: Application Service Level Mgmt) in Oracle Enterprise Manager. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability is exploitable over HTTP with network access and requires HIGH privileges; successful ex...

CVE-2020-2628

CVE-2020-2628 affects Oracle Enterprise Manager Base Platform (Host Management) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially leading to unauth...

CVE-2020-2624

Oracle Enterprise Manager Base Platform, Connector Framework is affected (CVE-2020-2624). The connected Nessus plugin lists affected versions: 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability path is described as an easily exploitable issue allowing a high-privileged attacker with network acces...

CVE-2020-2614

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: APM Mesh. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-2613

CVE-2020-2613 affects Oracle Enterprise Manager Base Platform within the Global EM Framework. Affected versions are 12.1.0.5, 13.2.0.0, and 13.3.0.0. The vulnerability is described as easily exploitable with network access via HTTP by a high-privilege attacker, potentially leading to unauthorized...

CVE-2020-2612

The CVE-2020-2612 entry concerns Oracle Enterprise Manager Base Platform (Enterprise Config Management) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The connected documents confirm this is a network-accessible issue via HTTP that allows a high-privilege attacker to compromise the Base ...

CVE-2020-2620

CVE-2020-2620 is reported to affect Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component, with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The connected Nessus entry corroborates this by listing CVE-2020-2620 among the vulnerabilities in the Ente...