CVE-2020-2547

CVE-2020-2547 affects Oracle WebLogic Server (Console component). Affected Oracle Fusion Middleware versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. An attacker with network access via HTTP and high privileges can exploit this to compromise WebLogic Server, with human interaction requ...

CVE-2020-2548

CVE-2020-2548 affects Oracle WebLogic Server 10.3.6.0.0 (WLS Core Components). The vulnerability allows a high-privileged attacker with network access via HTTP to compromise WebLogic Server, with required user interaction and potential unauthorized update/insert/delete and read access. Root cause...

CVE-2020-2546

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Application Container - JavaEE. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2020-2552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-2551

CVE-2020-2551 affects Oracle WebLogic Server (WLS Core Components) on versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The issue is a deserialization vulnerability in the IIOP protocol that allows an unauthenticated, network-remote attacker to take over the WebLogic Server. The CVSS 3....

CVE-2020-2555

CVE-2020-2555 (WebLogic/Coherence) : A deserialization vulnerability in Oracle Coherence (Fusion Middleware) enables unauthenticated remote code execution via the T3 protocol. Affected versions include Coherence 3.7.1.x, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0. The flaw originates from ReflectionExtra...

CVE-2020-2551

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP...

CVE-2020-2534

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-2537

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2020-2536

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2531

CVE-2020-2531 affects Oracle Business Intelligence Enterprise Edition (Oracle Fusion Middleware BI Platform Security). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability is described as difficult to exploit and requires network access via HTTP, with user interaction from a non-att...

CVE-2020-2519

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2538

CVE-2020-2538 affects Oracle WebCenter Sites (component: Advanced UI) in Oracle Fusion Middleware, with affected version 12.2.1.3.0. The vulnerability description indicates unauthenticated network access via HTTP, requiring user interaction, and potentially unauthorized data updates/deletes, read...

CVE-2020-2540

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2531

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: BI Platform Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2535

The CVE-2020-2535 entry concerns Oracle Business Intelligence Enterprise Edition (Analytics Server). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability is described as easily exploitable, with an unauthenticated attacker able to access the system over HTTP, requiring some user int...

CVE-2020-2539

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2020-2539

CVE-2020-2539 affects Oracle WebCenter Sites (Advanced UI) in Oracle Fusion Middleware, vulnerable in version 12.2.1.3.0. An unauthenticated attacker with network access via HTTP can compromise data, with successful attacks enabling unauthorized update/insert/delete and read access to WebCenter S...

CVE-2020-2539

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2020-2534

CVE-2020-2534 affects Oracle Reports Developer (Security and Authentication) within Oracle Fusion Middleware. Affected: 12.2.1.3.0 and 12.2.1.4.0. Description: unauthenticated network access via HTTP can compromise Oracle Reports Developer; some data may be updated, inserted, deleted, or read. CV...