PT-2019-16507

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. It requires human interaction from a person other than the attacker and can result in...

PT-2019-16506

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11.4 Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. It requires human interaction from a person other than the attacker and can result...

PT-2019-16480

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.9.0 and 12.2.1.3.0 Description The issue affects the BI Publisher component of Oracle Fusion Middleware, allowing a low-privileged attacker with network access via HTTP to compromise BI Publisher...

PT-2019-16542

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

CVE-2019-2818: Observable Discrepancy

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2019-2766: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

PT-2019-16531

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation component. Successful attacks require hum...

CVE-2019-2736: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows...

PT-2019-16492

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11.4 Description The issue allows an unauthenticated attacker with network access via NFS to compromise Oracle Solaris, with the attack requiring human interaction from a person other than the attacker. This can...

CVE-2019-2840: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with...

PT-2019-16479

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Planning version 11.1.2.4 Description The issue allows a high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning, resulting in unauthorized access to critical data or complete access to all...

CVE-2019-2845: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low...

CVE-2019-2735: Undefined Security Weakness

Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion subcomponent: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

CVE-2019-2760: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

CVE-2019-2871: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

CVE-2019-2878: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2019-2862: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM subcomponent: Java. The supported version that is affected is 19.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2870: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

CVE-2019-2787: Undefined Security Weakness

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Automount. Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful...

CVE-2019-2484: Undefined Security Weakness

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...