PT-2019-16465

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.0.1 through 12.4.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2019-16518

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.5 through 8.0.8 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Financial Services Analytical Applicatio...

CVE-2019-2764: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2728: Undefined Security Weakness

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Networking. Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2019-16456

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks can result in unauthorized update, insert, o...

CVE-2019-2758: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2019-16461

Name of the Vulnerable Software and Affected Versions Oracle Demantra Demand Management version 7.3.1.5.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Demantra Demand Management, resulting in unauthorized update, insert, or delete access...

HPE UIoT Information Disclosure Vulnerability

HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE in the United States. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in HPE UIoT. An attacker could exploit the vulnerability to gain...

PT-2019-5600

Name of the Vulnerable Software and Affected Versions Oracle Database Server Application Express versions 5.1 and 18.2 Description The issue is related to insufficient access control in the Application Express component, allowing a low-privileged attacker with a valid account and network access v...

CVE-2019-2800: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

Oracle Retail Applications Retail Customer Management and Segmentation Foundation Component Denial of Service Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation Oracle. The product includes inventory management, sales management and customer management, etc. Retail Customer Management and Segmentation Foundation is one of the retail customer management...

Oracle Retail Applications Retail Xstore Office Component Denial of Service Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management, etc. Retail Xstore Office is one of the Web-based central management console component. A securi...

Oracle Retail Applications Retail Xstore Office Denial of Service Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management, etc. Retail Xstore Office is one of the Web-based central management console component. A securi...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component version 8.8.3 i...

UBUNTU-CVE-2019-2791

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2019-1010084

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to ensureauth wrapper result in authentication-checking not being applied to al routes...

Oracle Hyperion Hyperion Planning Component Access Control Error Vulnerability

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report production and other functions. Hyperion Planning is one of the planning task component. A security vulnerability exists in the Smart View...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26747)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An access control error vulnerability exists in the Security subcomponent of Oracle Java SE versions 7u221, 8u212, and...

Oracle Hyperion Workspace Component Access Control Error Vulnerability

Oracle Hyperion is a set of financial modeling applications from Oracle USA. The software provides financial closure, report production, etc. Hyperion Workspace is one of the modular business intelligence platform. The platform can be in a single coordinated environment for a variety of data...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30453)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...