CVE-2022-21582: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21581: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21580: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0-3.2.0.0.0 and 4.0.0.0.0. Difficult to exploit vulnerability allows lo...

CVE-2022-21578: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

PT-2022-4690

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance, requiring human interaction from a person other than the attacker...

CVE-2022-21542: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2022-21560: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

PT-2022-4279

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue exists due to insufficient input validation in the Core component of Oracle WebLogic Server. This allows a remote...

PT-2022-4684

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8 Description The issue is related to insufficient input validation in the Core component of the Oracle ZFS Storage Appliance Kit. This allows a high-privileged attacker with logon access to the...

CVE-2022-21548: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2022-21585: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

PT-2022-3928

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.1 through 12.4 Oracle FLEXCUBE Universal Banking versions 14.0 through 14.3 Oracle FLEXCUBE Universal Banking version 14.5 Description The issue allows a low-privileged attacker with network access...

Oracle Communications Applications security vulnerabilities

Oracle Communications Applications and Oracle Communications Billing and Revenue Management are both products of Oracle Corporation.Oracle Communications Applications is an advanced communications and collaboration services application. Oracle Communications Applications is an advanced...

PT-2022-4693

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue is due to insufficient input validation in the Infrastructure component. It allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Trade Financ...

PT-2022-4686

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.3, 12.3 through 12.4, 14.0 through 14.3, 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks...

PT-2022-4069

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.6.3 and prior Description The issue is related to insufficient input validation in the Web Runtime component. It allows a low-privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2022-4067

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 13.4.0.0 through 13.5.0.0 Description The issue exists due to insufficient input validation in the Enterprise Manager Install component of the Enterprise Manager Base Platform. This allows a remote...

CVE-2022-21538: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2022-21539: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of th...

PT-2022-4683

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Revenue Management and Billing versions 2.9.0.0.0 through 2.9.0.1.0 Oracle Financial Services Revenue Management and Billing versions 3.0.0.0.0 through 3.2.0.0.0 Oracle Financial Services Revenue Management and Billin...