PT-2019-1276

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized...

PT-2019-1277

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized...

PT-2019-1279

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized...

PT-2019-1275

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized...

CVE-2019-2429: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2019-16414

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.8 Description The issue allows an unauthenticated attacker with logon to the infrastructure where the system executes to compromise it. Successful attacks can result in...

CVE-2019-2553: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2419: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products subcomponent: Form and Approval Builder. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2465: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2422: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2426: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2464: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27279)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

PT-2019-1310

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.3 Description The issue is related to insufficient access control in the Valid Session component of Oracle Reports Developer, allowing an unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-2408: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Feeds. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2469: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2504: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2506: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2441: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2399: Undefined Security Weakness

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...