Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specifi...

PT-2020-4642 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: The issue is related to the command-line interface CLI of Cisco SD-WAN Software, where insufficient input validation for specific commands could allow an authenticated, local...

PT-2020-4646

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software affected versions not specified Description A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The issue is due to...

PT-2020-4613

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software affected versions not specified Description A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The issue is due to...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Server Board M10JNP2SB server software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Server Board M10JNP2SB server software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-3459

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this...

PT-2020-4574

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the BI Publisher Security component of Oracle Fusion Middleware. It allows an...

PT-2020-4849

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4444

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Diagnostics component of the Oracle Application Object Library. It allows an unauthenticated attacker...

PT-2020-4407

Name of the Vulnerable Software and Affected Versions: Oracle Application Express Group Calendar versions prior to 20.2 Description: The issue exists due to insufficient input validation in the Oracle Application Express Group Calendar component of Oracle Database Server. This allows a remote...

PT-2020-4495

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Lifecycle Management version 11.1.2.4 Description The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2020-4847

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the Integration Broker component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4433

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Flex Fields component of Oracle CRM Technical Foundation. It allows an unauthenticated attacker with...

PT-2020-4448

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.7 Description: The issue is related to insufficient input validation in the Oracle Applications Manager component of Oracle E-Business Suite. This can be exploited by a remote...

PT-2020-4450

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the User Interface component of the Oracle Trade Management...

PT-2020-4420

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to insufficient input validation in the Oracle Text component, allowing an unauthenticated attacker with network access via Oracle Ne...

PT-2020-4443

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in a component of the Oracle Applications Framework. This can be exploited by a remote attacker to gain acce...

PT-2020-4555

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Administration component. This can be exploited by a remote attacker t...

PT-2020-4546

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0 Oracle Banking Corporate Lending versions 14.0.0 through 14.4.0 Description The issue is related to insufficient input validation in the Core component of the Oracle Banking Corporate Lending...