CVE-2020-2596: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Message Hooks. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2020-2597: Undefined Security Weakness

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Call Phone Number Page. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...

CVE-2020-2591: Undefined Security Weakness

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2020-2655: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this...

Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA

After Adobe today releases its first Patch Tuesday updates for 2020, Microsoft has now also published its January security advisories warning billions of users of 49 new vulnerabilities in its various products. What's so special about the latest Patch Tuesday is that one of the updates fixes a...

CVE-2014-2271

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java...

Code injection

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java...

CVE-2014-2271

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java...

PT-2020-1413

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-1418

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Others versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Others versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product,...

PT-2020-1586

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product, allowing an unauthenticated attacker wi...

PT-2020-1587

Name of the Vulnerable Software and Affected Versions Oracle iSupport versions 12.1.1 through 12.1.3 Oracle iSupport versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport web application. Exploitation of this issue may allow a remote...

PT-2020-1590

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Email Center product, specifically in the Message Display...

PT-2020-1464

Name of the Vulnerable Software and Affected Versions Oracle Web Applications Desktop Integrator version 12.1.3 Description The issue is related to inadequate access control in the Application Service component of Oracle Web Applications Desktop Integrator. This easily exploitable vulnerability...

PT-2020-1474

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Field Service versions 12.1.1 through 12.1.3 Oracle E-Business Suite Oracle Field Service versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Field Service...

Oracle Java SE CVE-2020-2655 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTPS' protocol. This issue affects the 'JSSE' component. This vulnerability affects the following supported versions: Java SE: 11.0.5, 13.0.1 Technologies Affected Oracle JDKLinux...

PT-2020-1589

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Oracle Email Center product, specifically in the Message Displ...

PT-2020-1546

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to the OSSL Module component of Oracle HTTP Server, allowing an unauthenticated attacker with network access via HTTPS to compromise the server...

PT-2020-1417

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-1412

Name of the Vulnerable Software and Affected Versions Oracle CRM Technical Foundation versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation. It allows a remote attacker to gain...