PT-2022-14988 · Oracle · Oracle Enterprise Data Quality

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Data Quality versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Data Quality. Successful attacks require human...

Oracle data feed is insufficiently validated

Lines of code Vulnerability details description When using Chainlink Price feeds it is important to ensure the price feed data was updated recently. While getting started with chainlink requires just one line of code, it is best to add additional checks for in production environments. findings...

basePrice and quotePrice values are insufficiently validated

Lines of code Vulnerability details Impact The oracle data feed basePrice and quotePrice in refreshedAssetPerBaseInUQ of ChainlinkPriceOracle.sol will be stale which results in wrong basePrice value and quotePrice value. Proof of Concept In refreshedAssetPerBaseInUQ function, it calls...

CVE-2021-2334

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access vi...

CVE-2021-2261

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CR...

CVE-2020-2983

Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager component: Data Masking. Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-2983

Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager component: Data Masking. Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

Buffer overflow

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

CVE-2019-2943 affects Oracle Data Integrator Studio (component) in Oracle Fusion Middleware, version 12.2.1.3.0. The vulnerability allows a low-privileged user with network access via HTTP to access or compromise Oracle Data Integrator data. The CVSS v3.0 base score is 6.5 (Confidentiality impact...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

Oracle Data Integrator Unauthorized Access Vulnerability

Oracle Data Integrator is an extract, load, and transform tool that provides a graphical environment for building, managing, and maintaining data integration processes in business intelligence systems. A security vulnerability exists in the Studio component of Oracle Data Integrator 12.2.1.3.0. A...

Oracle Data Integrator CVE-2019-2943 Remote Security Vulnerability

Description Oracle Data Integrator is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Studio' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Data Integrator...

CVE-2019-2720

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...

CVE-2019-2720

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...

Design/Logic Flaw

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...

CVE-2019-2720

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...