PT-2020-3589

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Security component of Oracle Unified Directory, part of Oracle Fusion Middleware. It allows a...

PT-2020-3591

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

PT-2020-3596

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to insufficient input validation in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. This allows an unauthenticated attacker with...

PT-2020-3590

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56, 8.57, 8.58 Description The issue is related to insufficient input validation in the Environment Mgmt Console component. It allows a high-privileged attacker with network access via HTTP to...

PT-2020-3866

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions prior to 11.3.1 Oracle Commerce Platform version 11.1 Oracle Commerce Platform version 11.2 Description: The issue is related to insufficient input validation in the Dynamo Application Framework component of...

PT-2020-3860

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue allows an unauthenticated attacker with...

PT-2020-3862

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue is related to insufficient input...

PT-2020-3885

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description: The issue is related to insufficient input validation in the Diagnostics subcomponent of the Oracle Application Object Library. It allows an unauthenticated attack...

PT-2020-3241

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 18.1.40 Description The issue exists due to insufficient input validation in the Data Store component of Oracle Berkeley DB. Exploitation of this issue can allow an attacker to gain full control over the...

PT-2020-3239

Name of the Vulnerable Software and Affected Versions Oracle Data Masking and Subsetting versions 13.3.0.0 through 13.4.0.0 Description The issue is related to insufficient input validation in the Data Masking component of Oracle Data Masking and Subsetting, allowing a low-privileged attacker wit...

PT-2020-3266

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.4 through 12.2.9 Description The issue is related to insufficient input validation in the Mobile Expenses Admin Utilities component of Oracle Internet Expenses. It allows a low-privileged attacker with...

PT-2020-3277

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component of the Oracle Retail Customer Management and Segmentation...

PT-2020-3546

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 6.1 through 6.1.1 Description The issue is related to insufficient input validation in the Assessment Manager component of Oracle iLearning, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-3267

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.4 through 12.2.9 Description The issue is related to insufficient input validation in the Mobile Expenses Admin Utilities component of Oracle Internet Expenses. This allows a low-privileged attacker with...

PT-2020-3243

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with a valid user...

PT-2020-3273

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3287

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3378

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3541

Name of the Vulnerable Software and Affected Versions Oracle Applications Framework versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Page Request component of the Oracle Applications Framework. This can be exploited by a remote...

PT-2020-3366

Name of the Vulnerable Software and Affected Versions Oracle CRM Technical Foundation versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Preferences component of Oracle CRM Technical Foundation, allowing a remote attacker to modify,...