CVE-2022-21571

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21558

Vulnerability in the Oracle Crystal Ball product of Oracle Construction and Engineering component: Installation. Supported versions that are affected are 11.1.2.0.000-11.1.2.4.900. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2022-21558

Vulnerability in the Oracle Crystal Ball product of Oracle Construction and Engineering component: Installation. Supported versions that are affected are 11.1.2.0.000-11.1.2.4.900. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2022-21555

CVE-2022-21555 affects MySQL Shell for VS Code (Shell: GUI) with affected versions 1.1.8 and earlier. The connected IBM Security Guardium bulletin lists the CVE-2022-21555 entry among several Oracle MySQL vulnerabilities and describes the impact as low confidentiality, low integrity, and no avail...

CVE-2022-21554

CVE-2022-21554 affects Oracle VM VirtualBox, Core component, in versions prior to 6.1.36. The vulnerability is described as easily exploitable and requires a high-privilege attacker with local logon to the host where VirtualBox runs. Successful exploitation can cause the VirtualBox process to han...

CVE-2022-21554

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21554

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21544

Oracle FLEXCUBE Universal Banking (Infrastructure) is affected by CVE-2022-21544. Affected versions: 12.1–12.4, 14.0–14.3, and 14.5. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, with user interaction required. Impact is takeover of the...

CVE-2022-21535

CVE-2022-21535 affects Oracle MySQL Shell (Shell: General/Core Client) for MySQL, with affected versions 8.0.28 and prior. The connected IBM Guardium entry explicitly describes an unauthenticated attacker who can log in to the infrastructure where MySQL Shell runs and, with user interaction, caus...

CVE-2022-21513

CVE-2022-21513 affects Oracle ZFS Storage Appliance Kit, Core component, in the 8.8 release. The vulnerability is described as a high-severity issue with a CVSS v3.1 base score of 8.2, enabling a high-privilege attacker who can log on to the infrastructure where the kit runs to compromise the pro...

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. Oracle Financial Services Revenue Management and Billing component: Infrastructure versions 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0...

PT-2022-4642

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to create, delete, or modify access to...

PT-2022-4687 · Oracle · Oracle Banking Trade Finance

Name of the Vulnerable Software and Affected Versions: Oracle Banking Trade Finance version 14.5 Description: The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to access, modify, add, or delete data vi...

Oracle FLEXCUBE Universal Banking 输入验证错误漏洞

Oracle FLEXCUBE Universal Banking is a general purpose digital banking system from Oracle Corporation. An input validation error vulnerability exists in Oracle FLEXCUBE Universal Banking component: Infrastructure versions 12.1 through 12.4, 14.0 through 14.3, and 14.5, which can be exploited by a...

PT-2022-3928

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.1 through 12.4 Oracle FLEXCUBE Universal Banking versions 14.0 through 14.3 Oracle FLEXCUBE Universal Banking version 14.5 Description The issue allows a low-privileged attacker with network access...

CVE-2022-21577: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2022-21581: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21578: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2022-21579: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...