PT-2020-4851

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the Query component of Oracle PeopleSoft Enterprise PeopleTools. This can be exploited by a remote attacker to...

PT-2020-4847

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the Integration Broker component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4846

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Global Payroll Core version 9.2 Description: The issue is related to insufficient input validation in the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application. This can be exploited by ...

PT-2020-4845

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.57 through 8.58 Description: The issue is related to insufficient input validation in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4850

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the PIA Grids component. It allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2020-4564

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the E-Business Suite - XDO component of Oracle BI Publisher. This allows a...

PT-2020-4569

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP,...

PT-2020-4548

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.1 through 12.0.3 Description The issue is related to insufficient input validation in the Pre Login component of Oracle FLEXCUBE Direct Banking, allowing an unauthenticated attacker with network...

PT-2020-4555

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Administration component. This can be exploited by a remote attacker t...

PT-2020-4542

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking version 12.3.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.4.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal...

PT-2020-4572

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the BI Publisher Security component. It allows an unauthenticated attacker with...

PT-2020-4567

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the E-Business Suite - XDO component of Oracle BI Publisher. This allows a...

PT-2020-4546

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0 Oracle Banking Corporate Lending versions 14.0.0 through 14.4.0 Description The issue is related to insufficient input validation in the Core component of the Oracle Banking Corporate Lending...

PT-2020-4550

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.7 Description The issue is related to insufficient input validation in the CAL component of Oracle Hospitality RES 3700, allowing an unauthenticated attacker with network access via TCP to compromise the...

PT-2020-4483

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Marketing Administration component of Oracle Marketing. It...

PT-2020-4444

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Diagnostics component of the Oracle Application Object Library. It allows an unauthenticated attacker...

PT-2020-4490

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This allows a high-privileged attacke...

PT-2020-4549

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.1 through 12.0.3 Description The issue is related to insufficient input validation in the Pre Login component of Oracle FLEXCUBE Direct Banking. This can allow a remote attacker to gain unauthorized...

PT-2020-4411

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component. It allows a low-privileged attacker with a valid user account and...

PT-2020-4404

Name of the Vulnerable Software and Affected Versions: Oracle Application Express Packaged Apps version prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express Packaged Apps component. It allows a low-privileged attacker with a valid user...