CVE-2020-2862: Undefined Security Weakness

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2020-2865: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2738: Undefined Security Weakness

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI, SWSE. Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks o...

CVE-2020-2922: Undefined Security Weakness

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

CVE-2020-2778: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

CVE-2020-2748: Out-of-bounds Read

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2734: Undefined Security Weakness

Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Execute on DBMSSQLTUNE privilege with network access via Oracle Net to...

CVE-2020-2949: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Caching, CacheStore, Invocation. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2766: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2764: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: Advanced Management Console. The supported version that is affected is Java Advanced Management Console: 2.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2020-2771: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

PT-2020-2130

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Partners component of Oracle Marketing, part of the Oracle...

CVE-2020-2889: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM...

PT-2020-2530

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access controls in the Caching, CacheStore, and Invocation components of Oracle Coherence. This can be exploited by a remote...

PT-2020-2627

Name of the Vulnerable Software and Affected Versions Oracle Configurator versions 12.1 and 12.2 Description The issue is related to insufficient access control in the Installation component of the Oracle Configurator application. It allows a remote attacker to gain unauthorized access to protect...

PT-2020-2574

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2020-2539

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting versions 11.1.2.4 Description The issue is related to insufficient access control in the Web Based Report Designer component of Oracle Hyperion Financial Reporting. It allows a remote attacker to gain...

PT-2020-2494

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to insufficient access controls in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTT...

PT-2020-2545

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.16 Description The issue is related to inadequate access control in the Advanced Management Console component of the Java SE product. It allows an unauthenticated attacker with network access via...

PT-2020-2291

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description The issue is related to the RDBMS/Optimizer component of Oracle Database Server, where an easily exploitable vulnerability allows a high-privileged attacker with...