CVE-2020-2724: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

PT-2020-1330 · Oracle · Oracle Flexcube Investor Servicing

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0 Description: The issue is related to inadequate access controls in the Infrastructure component of Oracle...

PT-2020-1517 · Oracle · Siebel Ui Framework

Name of the Vulnerable Software and Affected Versions: Oracle Siebel CRM Siebel UI Framework versions 19.7 and prior Description: The issue is related to insufficient access controls in the UIF Open UI component of the Siebel UI Framework product. It allows an unauthenticated attacker with networ...

PT-2020-1346

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.18 and prior Description The issue is related to inadequate access control in the MySQL Server product, specifically in the Server: Information Schema component. It allows an attacker with network access via multiple...

PT-2020-1338

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to insufficient access control in the Core component of Oracle Banking Payments, allowing a remote attacker to gain unauthorized access to protected...

PT-2020-1409

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 16.0 Description The issue is related to insufficient access control in the Internal Operations component of the Oracle Retail Customer Management and Segmentation Foundatio...

PT-2020-1543

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Human Resources version 9.2 Description The issue is related to inadequate access control in the Company Dir / Org Chart Viewer component. It allows a low-privileged attacker with network access via HTTP to compromise...

PT-2020-1467

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition version 19.3.0.2 Description The issue is related to insufficient access control in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition. This allows an unauthenticated attacker with network...

PT-2020-1302

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2020-1530

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to inadequate access control in the Analytics Server component. It allows an unauthenticated attacker with network access v...

PT-2020-1352

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.0.1 through 12.4.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.3.0 Description The issue is related to a lack of protection for service data in the Infrastructure component of Orac...

PT-2020-1347

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CC Common Application Objects versions 9.1 through 9.2 Description The issue is related to inadequate access control in the Approval Framework component of PeopleSoft Enterprise CC Common Application Objects, allowing an...

Design/Logic Flaw

A vulnerability in the SOAP API of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the DCNM application...

CVE-2019-15983 Cisco Data Center Network Manager XML External Entity Read Access Vulnerability

A vulnerability in the SOAP API of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the DCNM application...

CVE-2019-15983 Cisco Data Center Network Manager XML External Entity Read Access Vulnerability

A vulnerability in the SOAP API of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the DCNM application...

CVE-2019-19927

In the Linux kernel 5.0.0-rc7 as distributed in ubuntu/linux.git on kernel.ubuntu.com, mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttmputpages in drivers/gpu/drm/ttm/ttmpagealloc.c. This is related to the vmwgfx or ttm modu...

CVE-2019-19927

In the Linux kernel 5.0.0-rc7 as distributed in ubuntu/linux.git on kernel.ubuntu.com, mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttmputpages in drivers/gpu/drm/ttm/ttmpagealloc.c. This is related to the vmwgfx or ttm modu...

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM...

PT-2019-14714 · Jenkins · Jenkins Websphere Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins WebSphere Deployer Plugin versions 1.6.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specifie...

PT-2019-14716 · Jenkins · Jenkins Websphere Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins WebSphere Deployer Plugin version 1.6.1 and earlier Description: The issue allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM. Recommendations: For Jenkins...