PT-2020-3287

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3387

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access vi...

PT-2020-3366

Name of the Vulnerable Software and Affected Versions Oracle CRM Technical Foundation versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Preferences component of Oracle CRM Technical Foundation, allowing a remote attacker to modify,...

PT-2020-3247

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue exists due to insufficient input validation in the Oracle Application Express component of Oracle Database Server. Exploitation of this issue may allow a remote attacke...

PT-2020-3388

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an...

PT-2020-3383

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

PT-2020-3545

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to insufficient input validation in the Inventory Integration component. It allows a high-privileged attacker with logon access to the infrastructure whe...

PT-2020-3238

Name of the Vulnerable Software and Affected Versions Oracle Configuration Manager version 12.1.2.0.6 Description The issue exists due to insufficient input validation in the Discovery and collection script component of Oracle Configuration Manager. This allows a remote attacker to gain...

PT-2020-3265

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing a remote attacker to impact the...

PT-2020-3278

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component. It allows a low-privileged attacker with network access via HT...

PT-2020-3246

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...

PT-2020-3579

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Investor Servicing. This allows a...

PT-2020-3576

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HT...

PT-2020-3555

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3552

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3591

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

PT-2020-3866

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions prior to 11.3.1 Oracle Commerce Platform version 11.1 Oracle Commerce Platform version 11.2 Description: The issue is related to insufficient input validation in the Dynamo Application Framework component of...

PT-2020-3862

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue is related to insufficient input...

PT-2020-3546

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 6.1 through 6.1.1 Description The issue is related to insufficient input validation in the Assessment Manager component of Oracle iLearning, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-3243

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with a valid user...