PT-2020-3885

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description: The issue is related to insufficient input validation in the Diagnostics subcomponent of the Oracle Application Object Library. It allows an unauthenticated attack...

PT-2020-3287

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3387

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access vi...

PT-2020-3285

Name of the Vulnerable Software and Affected Versions Oracle SD-WAN Aware version 8.2 Description The issue is related to insufficient input validation in the User Interface component of Oracle SD-WAN Aware. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

PT-2020-3552

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3546

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 6.1 through 6.1.1 Description The issue is related to insufficient input validation in the Assessment Manager component of Oracle iLearning, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-3388

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an...

PT-2020-3865

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions prior to 11.3.1 Description: The issue is related to insufficient input validation in the Dynamo Application Framework component of the Oracle Commerce Platform. It allows an unauthenticated attacker with...

PT-2020-3270

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the CRM User Management Framework component of Oracle Common Applications. This allows an unauthenticated...

PT-2020-3277

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component of the Oracle Retail Customer Management and Segmentation...

PT-2020-3276

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component of the Oracle Retail Customer Management and Segmentation...

PT-2020-3368

Name of the Vulnerable Software and Affected Versions Oracle CRM Technical Foundation versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Preferences component of Oracle CRM Technical Foundation. This can be exploited by a remote...

PT-2020-3243

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with a valid user...

PT-2020-3548

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Setup of Mobile Applications component of the Oracle CRM Gateway for Mobile Devices product. This easily exploitabl...

PT-2020-3383

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

PT-2020-3382

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP,...

PT-2020-3262

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient input validation in the Device Driver Utility component of Oracle Solaris. This can be exploited to impact the confidentiality, integrity, and availability of protected...

PT-2020-3555

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3576

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HT...

PT-2020-3869

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Guided Search / Oracle Commerce Experience Manager versions prior to 11.3.1 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce...