PT-2020-4548

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.1 through 12.0.3 Description The issue is related to insufficient input validation in the Pre Login component of Oracle FLEXCUBE Direct Banking, allowing an unauthenticated attacker with network...

PT-2020-4549

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.1 through 12.0.3 Description The issue is related to insufficient input validation in the Pre Login component of Oracle FLEXCUBE Direct Banking. This can allow a remote attacker to gain unauthorized...

PT-2020-4572

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the BI Publisher Security component. It allows an unauthenticated attacker with...

PT-2020-4542

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking version 12.3.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.4.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal...

PT-2020-4567

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the E-Business Suite - XDO component of Oracle BI Publisher. This allows a...

PT-2020-4550

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.7 Description The issue is related to insufficient input validation in the CAL component of Oracle Hospitality RES 3700, allowing an unauthenticated attacker with network access via TCP to compromise the...

PT-2020-4569

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP,...

PT-2020-4845

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.57 through 8.58 Description: The issue is related to insufficient input validation in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4478

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue is related to insufficient input validation in the Print Server component of Oracle One-to-One Fulfillment. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4485

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Lifecycle Management version 11.1.2.4 Description The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2020-4452

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the User Interface component of the Oracle Trade Management...

PT-2020-4454

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Marketing Administration component of Oracle Marketing,...

PT-2020-4547

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.4.0 Description The issue is related to insufficient input validation in the Core component of Oracle Banking Payments, allowing a low-privileged attacker with network access via HTTP to...

PT-2020-4399

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c Description: The issue is related to insufficient input validation in the SQL Developer Install component of Oracle Database Server. This vulnerability can be easily...

PT-2020-4555

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Administration component. This can be exploited by a remote attacker t...

PT-2020-4405

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Quick Poll component. It allows a low-privileged attacker with a valid user account and network...

PT-2020-4493

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.1.2.4 Description The issue is related to insufficient input validation in the UI and Visualization component. It allows a high-privileged attacker with network access via HTTP to compromise...

PT-2020-4566

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, allowing an unauthenticated attacker with network access...

PT-2020-4404

Name of the Vulnerable Software and Affected Versions: Oracle Application Express Packaged Apps version prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Packaged Apps component. It allows a low-privileged attacker with a valid user...

PT-2020-4492

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.2 and 8.11 through 8.14 Description The issue is related to insufficient input validation in the WebConnect component of Oracle Hospitality Suite8, allowing a remote attacker to gain unauthorized access ...