CVE-2020-14636

CVE-2020-14636 affects Oracle WebLogic Server (Fusion Middleware) component: Sample apps. Affected: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. Description: vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server; successful attacks may lead...

CVE-2020-14640

The CVE-2020-14640 vulnerability affects Oracle WebLogic Server (Oracle Fusion Middleware) in the Sample apps component. Affected versions are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It is exploitable over HTTP with network access and requires user interaction, enabling an attacker to ...

CVE-2020-14642

CVE-2020-14642 affects Oracle Coherence (Fusion Middleware) CacheStore. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability permits an unauthenticated remote attacker over HTTP to cause a hang or complete DoS in Oracle Coherence. CVSS 3.1 base score 7....

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14626

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker...

CVE-2020-14613

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14622

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-14622

CVE-2020-14622 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions include 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise WebLogic Server, potentially leading to un...

CVE-2020-14626

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker...

CVE-2020-14626

The CVE-2020-14626 entry concerns Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Analytics Web General). Affected versions are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The issue is exploitable by an unauthenticated attacker over HTTP, with the potential to ta...

CVE-2020-14625

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle...

CVE-2020-14613

CVE-2020-14613 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Advanced User Interface component. Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites; exploitation requires user i...

CVE-2020-14613

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14611

CVE-2020-14611 affects Oracle WebCenter Portal (Oracle Fusion Middleware) — Composer component. Affected versions: 12.2.1.3.0 and 12.2.1.4.0. Root cause/exploit path: unauthenticated, network-accessible over HTTP, enabling an attacker to create, delete, or modify data, read data, and cause partia...

CVE-2020-14608

CVE-2020-14608 affects Oracle Fusion Middleware MapViewer Tile Server (version 12.2.1.3.0). The vulnerability allows unauthenticated network access via HTTP to compromise MapViewer, potentially enabling unauthorized creation, deletion or modification of data, and read access to data. The CVSS v3....

CVE-2020-14607

CVE-2020-14607 affects Oracle Fusion Middleware MapViewer Tile Server (versions 12.2.1.3.0 and 12.2.1.4.0). The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise MapViewer; exploitation is described as easily exploitable and may lead to unauthorized read...

CVE-2020-14609

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web Answers. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2020-14608

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion...

CVE-2020-14607

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14607

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...