CVE-2019-2985: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Fluid Core. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2019-3020: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 15.1.0-15.2.18, 16.1.0-16.2.18, 17.1.0-17.12.14 and 18.1.0-18.8.11. Easily exploitable vulnerability allows...

CVE-2019-3024: Undefined Security Weakness

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...

CVE-2019-2925: Undefined Security Weakness

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

CVE-2019-2979: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications component: Payments. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2019-2972: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2952: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

Unspecified Vulnerability in Oracle Hyperion Enterprise Performance Management Architect

Oracle Hyperion is a suite of financial modeling applications from Oracle USA. The software provides financial closure, report production, etc. Hyperion Enterprise Performance Management Architect is one of the performance management architect component. An unspecified vulnerability exists in...

CVE-2019-2955: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS...

CVE-2019-2947: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Inventory Integration privilege with network access via HTTP ...

Oracle Database Server Core RDBMS Component Information Disclosure Vulnerability

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An information disclosure vulnerability exis...

CVE-2019-2954: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructu...

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2019-37231)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

CVE-2019-2959: Undefined Security Weakness

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion component: Security Models. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting...

PT-2019-3597

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.34 and prior to 6.0.14 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized access to protected...

PT-2019-3583

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Performance Monitor subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2019-3717

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools, allowing a remote attacker to modify, add, or delet...

PT-2019-3681

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

PT-2019-3719

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools product, specifically in the Portal component. It allows an unauthenticated...

PT-2019-3625

Name of the Vulnerable Software and Affected Versions Oracle Banking Digital Experience versions 18.1 through 19.1 Description The issue is related to inadequate access control in the Loan Calculator component of Oracle Banking Digital Experience, part of Oracle Financial Services Applications...