CVE-2020-3388: Improper Authentication

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating t...

PT-2020-3869

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Guided Search / Oracle Commerce Experience Manager versions prior to 11.3.1 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce...

PT-2020-3362

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Invoice component of Oracle Trade Management. It allows an...

PT-2020-3383

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

PT-2020-3545

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to insufficient input validation in the Inventory Integration component. It allows a high-privileged attacker with logon access to the infrastructure whe...

PT-2020-3247

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue exists due to insufficient input validation in the Oracle Application Express component of Oracle Database Server. Exploitation of this issue may allow a remote attacke...

PT-2020-3238

Name of the Vulnerable Software and Affected Versions Oracle Configuration Manager version 12.1.2.0.6 Description The issue exists due to insufficient input validation in the Discovery and collection script component of Oracle Configuration Manager. This allows a remote attacker to gain...

PT-2020-3253

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a perso...

PT-2020-3274

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3285

Name of the Vulnerable Software and Affected Versions Oracle SD-WAN Aware version 8.2 Description The issue is related to insufficient input validation in the User Interface component of Oracle SD-WAN Aware. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

PT-2020-3280

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 17.1.0.0 through 17.12.17.1 Primavera P6 Enterprise Project Portfolio Management versions 18.1.0.0 through 18.8.19 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-3269

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the CRM User Management Framework component of Oracle Common Applications. It allows an unauthenticated...

PT-2020-3276

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component of the Oracle Retail Customer Management and Segmentation...

PT-2020-3265

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing a remote attacker to impact the...

PT-2020-3264

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

PT-2020-3270

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the CRM User Management Framework component of Oracle Common Applications. This allows an unauthenticated...

PT-2020-3262

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient input validation in the Device Driver Utility component of Oracle Solaris. This can be exploited to impact the confidentiality, integrity, and availability of protected...

PT-2020-3278

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component. It allows a low-privileged attacker with network access via HT...

PT-2020-3281

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions prior to 19.1.0.0.0 Description The issue is related to insufficient input validation in the Process Management component of Oracle GoldenGate, which can be exploited by a remote attacker to impact the integrity,...

PT-2020-3246

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...