CVE-2020-2611

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2611

CVE-2020-2611 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially lead...

CVE-2020-2591

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2020-2586

CVE-2020-2586 affects Oracle E-Business Suite HR, specifically the Hierarchy Diagrammers component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The entry describes an easily exploitable vulnerability that enables a low-privilege, network-accessible attacker (HTTPS) to compromise Oracle...

CVE-2020-2589

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.28 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-2600

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-2589

CVE-2020-2589 is a vulnerability in Oracle MySQL Server (InnoDB) affecting 5.7.28 and earlier and 8.0.17 and earlier. The issue can allow a high-privilege attacker with network access via multiple protocols to cause a hang or repeated crashes (complete DOS) of MySQL Server, with an availability i...

CVE-2020-2598

CVE-2020-2598 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Activity Guide component, in versions 8.56 and 8.57. The vulnerability arises from an issue in PeopleTools that allows an unauthenticated attacker, with network access via HTTP, to compromise the PeopleSoft PeopleToo...

CVE-2020-2568

CVE-2020-2568 is a vulnerability in the Oracle Applications DBA component of Oracle Database Server. Affected products/versions listed in the provided materials include Oracle Database Server with Applications DBA: 12.1.0.2, 12.2.0.1, 18c, and 19c. The flaw can be exploited by a low-privilege att...

CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

CVE-2020-2579

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2020-2541

Technical details about CVE-2020-2541 are not publicly provided in the supplied documents. Monitor for updates from Oracle advisories and affected vendors for concrete vulnerability information.

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2557

Oracle Demantra Demand Management (versions 12.2.4–12.2.5.1) is vulnerable due to insufficient access control in the Security component, allowing an unauthenticated attacker with network access over HTTP to compromise data. Successful attacks can result in unauthorized update, insert, or delete o...

CVE-2020-2543

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2556

The CVE-2020-2556 issue affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Core. Affected versions include 16.2.0.0–16.2.19.0, 17.12.0.0–17.12.16.0, 18.8.0.0–18.8.16.0, 19.12.0.0 and 20.1.0.0. The vulnerability enables a low-privileged attacker with logon access to comprom...

CVE-2020-2530

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2516

CVE-2020-2516 references a vulnerability in Oracle Database Server’s Core RDBMS component affecting Oracle versions 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker with Create Materialized View or Create Table privileges and network access via OracleNet could compromise Core RDBMS; exploitation req...

CVE-2020-2535

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t...

CVE-2020-2516

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Materialized View, Create Table privilege with network access via OracleNet...