CVE-2022-21516: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2022-21432: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle N...

CVE-2022-21428: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

PT-2022-3928

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.1 through 12.4 Oracle FLEXCUBE Universal Banking versions 14.0 through 14.3 Oracle FLEXCUBE Universal Banking version 14.5 Description The issue allows a low-privileged attacker with network access...

PT-2022-4069

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.6.3 and prior Description The issue is related to insufficient input validation in the Web Runtime component. It allows a low-privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2022-4067

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 13.4.0.0 through 13.5.0.0 Description The issue exists due to insufficient input validation in the Enterprise Manager Install component of the Enterprise Manager Base Platform. This allows a remote...

PT-2022-4279

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue exists due to insufficient input validation in the Core component of Oracle WebLogic Server. This allows a remote...

PT-2022-4683

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Revenue Management and Billing versions 2.9.0.0.0 through 2.9.0.1.0 Oracle Financial Services Revenue Management and Billing versions 3.0.0.0.0 through 3.2.0.0.0 Oracle Financial Services Revenue Management and Billin...

PT-2022-4686

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.3, 12.3 through 12.4, 14.0 through 14.3, 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks...

PT-2022-4690

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance, requiring human interaction from a person other than the attacker...

PT-2022-4684

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8 Description The issue is related to insufficient input validation in the Core component of the Oracle ZFS Storage Appliance Kit. This allows a high-privileged attacker with logon access to the...

PT-2022-4693

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue is due to insufficient input validation in the Infrastructure component. It allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Trade Financ...

CVE-2022-21580: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0-3.2.0.0.0 and 4.0.0.0.0. Difficult to exploit vulnerability allows lo...

PT-2022-3786

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.29 and prior Description The issue is related to the InnoDB component of Oracle MySQL Server and is associated with access control weaknesses. It allows a low-privileged attacker with network access via multipl...

Oracle MySQL input validation vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL Component: Shell: General/Core Client for MySQL Shell version 8.0.28 and prior version...

Oracle JD Edwards Products: Input validation error vulnerability

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle. The products provide application modules for financial management, project management, and asset lifecycle management. An input validation error vulnerability exists in Oracle JD...

Oracle Communications Applications security vulnerabilities

Oracle Communications Applications and Oracle Communications Billing and Revenue Management are both products of Oracle Corporation.Oracle Communications Applications is an advanced communications and collaboration services application. Oracle Communications Applications is an advanced...

CVE-2022-21539: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of th...

Oracle ZFS Storage Appliance has a vulnerability related to input validation.

Oracle ZFS Storage Appliance is a storage appliance that supports flash memory, petabyte file storage and built-in Oracle database from Oracle USA. A security vulnerability exists in the Oracle ZFS Storage Appliance that could be exploited by an attacker to cause unauthorized update, insertion, o...

GHSA-C28R-HW5M-5GV3 Partial Path Traversal in com.amazonaws:aws-java-sdk-s3

Overview A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java v1. Applications using the SDK control the destinationDirectory argument, but S3 object keys are determined by the application that uploaded the...