CVE-2020-2649

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2020-2649

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2020-2647

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2656

Vulnerability in the Oracle Solaris product of Oracle Systems component: X Window System. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2656

CVE-2020-2656 affects Oracle Solaris (X Window System) on Solaris 10 and 11. It is a local, low-privilege information-disclosure flaw in the Xlock component that can lead to read access to partial data and potential data modification. Mitigation paths in public advisories include applying Solaris...

CVE-2020-2565

CVE-2020-2565 affects Oracle Solaris 11 in the Consolidation Infrastructure component. The vulnerability allows a low-privileged user with local logon to Oracle Solaris infrastructure to compromise the system, with user interaction required and potential impact beyond the Solaris host. The CVSS 3...

CVE-2020-2565

Vulnerability in the Oracle Solaris product of Oracle Systems component: Consolidation Infrastructure. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracl...

CVE-2020-2571

CVE-2020-2571 affects Oracle VM Server for SPARC (Templates), with vulnerability resting in version 3.6. The flaw can be triggered by a locally present attacker who has logon to the infrastructure and requires user interaction to exploit, potentially leading to unauthorized updates or reads in Or...

CVE-2020-2581

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Editi...

CVE-2020-2569

CVE-2020-2569 concerns the Oracle Database Server, specifically the Oracle Applications DBA component. Affected are Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability is described as easily exploitable by a low-privileged attacker who already has Local L...

CVE-2020-2581

CVE-2020-2581 affects Oracle GraalVM Enterprise Edition, LLVM Interpreter, specifically version 19.3.0.2. The issue allows an unauthenticated user with access to the hosting infrastructure to compromise GraalVM Enterprise Edition, potentially causing partial denial of service (availability impact...

CVE-2020-2550

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2556

The CVE-2020-2556 issue affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Core. Affected versions include 16.2.0.0–16.2.19.0, 17.12.0.0–17.12.16.0, 18.8.0.0–18.8.16.0, 19.12.0.0 and 20.1.0.0. The vulnerability enables a low-privileged attacker with logon access to comprom...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2550

CVE-2020-2550 affects Oracle WebLogic Server (WLS Core Components) and is associated with versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability arises from insufficient access control in the WLS Core Components, enabling a locally authenticated attacker with logon to the i...

PT-2020-1394 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Analytical Applications Infrastructure versions 8.0.4 through 8.0.8 Description: The issue is related to a lack of protection for internal data in the Object Migration component of Oracle Financial Services Analytica...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure

Oracle Financial Services Applications is a set of financial services software from Oracle. The product includes core banking, online banking and property management, etc. Financial Services Analytical Applications Infrastructure is one of the financial services analytical applications...

Solaris 10 (x86) : 150401-68

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Public Bug Bounty Takes Aim at Kubernetes Container Project

A public bug-bounty program for the Kubernetes container technology framework has just launched, backed by Google, HackerOne and the Cloud Native Computing Foundation CNCF. The Kubernetes container-orchestration system was originally built by Google for automating application deployment, scaling...