CVE-2020-3388: Improper Authentication

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating t...

PT-2020-3362

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Invoice component of Oracle Trade Management. It allows an...

PT-2020-3273

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3860

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue allows an unauthenticated attacker with...

PT-2020-3538

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FIN Expenses version 9.2 Description The issue is related to insufficient input validation in the Expenses component. It allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FI...

PT-2020-3593

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to insufficient input validation in the Installation component of Oracle Hospitality Reporting and Analytics, allowing a low-privileged attacker with log...

PT-2020-3375

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTTP ...

PT-2020-3547

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Address Book component of Oracle iStore. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-3239

Name of the Vulnerable Software and Affected Versions Oracle Data Masking and Subsetting versions 13.3.0.0 through 13.4.0.0 Description The issue is related to insufficient input validation in the Data Masking component of Oracle Data Masking and Subsetting, allowing a low-privileged attacker wit...

PT-2020-3365

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3276

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component of the Oracle Retail Customer Management and Segmentation...

PT-2020-3578

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, part of Oracle Fusion Middleware. It allows an...

PT-2020-3267

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.4 through 12.2.9 Description The issue is related to insufficient input validation in the Mobile Expenses Admin Utilities component of Oracle Internet Expenses. This allows a low-privileged attacker with...

PT-2020-3541

Name of the Vulnerable Software and Affected Versions Oracle Applications Framework versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Page Request component of the Oracle Applications Framework. This can be exploited by a remote...

PT-2020-3596

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to insufficient input validation in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. This allows an unauthenticated attacker with...

PT-2020-3382

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP,...

PT-2020-3281

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions prior to 19.1.0.0.0 Description The issue is related to insufficient input validation in the Process Management component of Oracle GoldenGate, which can be exploited by a remote attacker to impact the integrity,...

PT-2020-3266

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.4 through 12.2.9 Description The issue is related to insufficient input validation in the Mobile Expenses Admin Utilities component of Oracle Internet Expenses. It allows a low-privileged attacker with...

PT-2020-3270

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the CRM User Management Framework component of Oracle Common Applications. This allows an unauthenticated...

PT-2020-3269

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the CRM User Management Framework component of Oracle Common Applications. It allows an unauthenticated...