239 matches found
CVE-2020-14745
CVE-2020-14745 affects Oracle REST Data Services (ORDS) General component. Affected versions include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c, and Standalone ORDS before 20.2.1. The issue enables a low-privileged, network-accessible attacker over HTTP to read a subset of ORDS data. No exploitation ...
CVE-2020-14745
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
CVE-2020-14745
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
CVE-2020-14744
The CVE-2020-14744 issue affects Oracle REST Data Services (ORDS) General component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c, with Standalone ORDS prior to 20.2.1. The vulnerability is described as easily exploitable by a low-privileged attacker who has network access via...
CVE-2020-14744
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
CVE-2020-14744
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
PT-2020-4400
Name of the Vulnerable Software and Affected Versions: Oracle REST Data Services versions 11.2.0.4 through 19c Standalone ORDS versions prior to 20.2.1 Description: The issue is related to errors in security mechanisms in the General component of Oracle REST Data Services, which can be exploited ...
PT-2020-4422
Name of the Vulnerable Software and Affected Versions: Oracle REST Data Services versions 11.2.0.4 through 19c Standalone ORDS versions prior to 20.2.1 Description: The issue is related to security mechanism errors in the General component of Oracle REST Data Services. It allows a low-privileged...
CVE-2020-14744: Undefined Security Weakness
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
CVE-2020-14745: Undefined Security Weakness
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...
CVE-2020-13444
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers...
CVE-2020-13444
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers...
CVE-2020-13444
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers...
CVE-2020-13444
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers...
CVE-2020-13444
Affected software: Liferay Portal 7.x (7.0/7.1/7.2) prior to specific fix packs and Liferay DXP 7.x before their corresponding fixes. Vulnerability: the DDMDataProvider API may leak authentication data; information returned by the API is not properly sanitized, allowing remote authenticated users...
PT-2020-13545
Name of the Vulnerable Software and Affected Versions Liferay Portal versions prior to 7.3.2 Liferay DXP versions prior to 7.0 fix pack 92 Liferay DXP versions prior to 7.1 fix pack 18 Liferay DXP versions prior to 7.2 fix pack 5 Description The issue concerns the DDMDataProvider API, which does...
CVE-2020-13444: Undefined Security Weakness
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers...
Design/Logic Flaw
A vulnerability in the Policy and Charging Rules Function PCRF of the Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The attacker would also have to have access ...
