9374 matches found
CVE-2020-14723
Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware component: Web UIX. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Help...
CVE-2020-14723
Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware component: Web UIX. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Help...
CVE-2020-14723
CVE-2020-14723 affects Oracle Help Technologies (Web UIX) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0 through 12.2.1.3.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Help Technologies, with human interaction required, potent...
CVE-2020-14690
CVE-2020-14690 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Analytics Actions). Affects supported versions: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability permits unauthenticated, network-based access via HTTP with user interaction required...
CVE-2020-14696
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14696
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14687
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle...
CVE-2020-14696
The CVE-2020-14696 vulnerability affects Oracle BI Publisher (Layout Templates) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An unauthenticated attacker with network access over HTTP can compromise BI Publisher, with possible unauthorized read, up...
CVE-2020-14690
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2020-14652
CVE-2020-14652 affects Oracle WebLogic Server (Core component). Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker to achieve unauthorized update/insert/delete and read access to data ...
CVE-2020-14652
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14655
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...
CVE-2020-14655
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...
CVE-2020-14655
CVE-2020-14655 affects Oracle Security Service (SSL API) in Oracle Fusion Middleware. Affects 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Vulnerability allows unauthenticated attackers over HTTPS to access/modify Oracle Security Service data with C:H I:L, per CVSSv3.1 base metrics (Network, high attac...
CVE-2020-14638
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14640
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14636
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14639
CVE-2020-14639 affects Oracle WebLogic Server (Oracle Fusion Middleware) with the Sample Apps component. Affected versions are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potent...
CVE-2020-14637
CVE-2020-14637 affects Oracle WebLogic Server (Fusion Middleware) in the Sample Apps component for 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability can allow unauthorized read and write to WebLogic Server data via HTTP, with network access and required user interaction, per CV...
CVE-2020-14645
Oracle WebLogic Server Core vulnerability CVE-2020-14645 affects WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via IIOP/T3 can compromise the server and achieve takeover. CVSS 3.1 base score 9.8 (C:H, I:H, A...