Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specifi...

PT-2020-4642 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: The issue is related to the command-line interface CLI of Cisco SD-WAN Software, where insufficient input validation for specific commands could allow an authenticated, local...

PT-2020-4613

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software affected versions not specified Description A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The issue is due to...

PT-2020-4646

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software affected versions not specified Description A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The issue is due to...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Server Board M10JNP2SB server software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Server Board M10JNP2SB server software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-3459

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this...

PT-2020-4493

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.1.2.4 Description The issue is related to insufficient input validation in the UI and Visualization component. It allows a high-privileged attacker with network access via HTTP to compromise...

PT-2020-4475

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the User Interface component of Oracle Trade Management, part o...

PT-2020-4448

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.7 Description: The issue is related to insufficient input validation in the Oracle Applications Manager component of Oracle E-Business Suite. This can be exploited by a remote...

PT-2020-4485

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Lifecycle Management version 11.1.2.4 Description The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2020-4846

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Global Payroll Core version 9.2 Description: The issue is related to insufficient input validation in the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application. This can be exploited by ...

PT-2020-4547

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.4.0 Description The issue is related to insufficient input validation in the Core component of Oracle Banking Payments, allowing a low-privileged attacker with network access via HTTP to...

PT-2020-4479

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Marketing Administration component of Oracle Marketing. It...

PT-2020-4491

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This easily exploitable vulnerability...

PT-2020-4574

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the BI Publisher Security component of Oracle Fusion Middleware. It allows an...

PT-2020-4566

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, allowing an unauthenticated attacker with network access...

PT-2020-4632

Name of the Vulnerable Software and Affected Versions Oracle Communications Diameter Signaling Router DSR versions 8.0.0.0 through 8.4.0.5 Description The issue is related to insufficient input validation in the User Interface component of the Oracle Communications Diameter Signaling Router DSR...

PT-2020-4635

Name of the Vulnerable Software and Affected Versions Oracle Communications Diameter Signaling Router DSR versions 8.0.0.0 through 8.4.0.5 Description The issue is related to insufficient input validation in the User Interface component of the Oracle Communications Diameter Signaling Router DSR...

PT-2020-4849

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to...