Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27772)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

PT-2019-16458

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.44 and prior Oracle MySQL versions 5.7.18 and prior Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in...

PT-2019-4921

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description The issue is related to inadequate access control in the MySQL Server component, specifically in the Server: Audit Plug-in subcomponent. It allows a...

PT-2019-16494 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized update, insert, or delete...

PT-2019-5301

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, specifically the Outside In Filters subcomponent. It allows an unauthenticated attacker wit...

PT-2020-2615

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 8.0.14 and prior MySQL Connectors versions 5.1.48 and prior Description The issue is related to insufficient access control in the Connector/J component of MySQL Connectors, allowing an unauthenticated attacker with...

mysql: Client programs unspecified vulnerability (CPU Jul 2018)

Vulnerability in the MySQL Client component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via...

Information Disclosure

MySQL is vulnerable to information disclosure vulnerability. The vulnerability exists in an unknown part of the component MyISAM in the MySQL Server component of Oracle MySQL. A low privileged attacker with network access via multiple protocols could gain access to update, insert or delete access...

PT-2019-2255 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to inadequate protection of the web page structure. This can be...

Information Disclosure Vulnerability in Multiple Qualcomm Products (CNVD-2019-13771)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An information disclosure vulnerability exists in multiple Qualcomm products. The vulnerability arises fro...

PT-2019-12475

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Firewall Analyzer versions prior to 12.3 Build 123224 Description The issue concerns the Custom Report import function, which is susceptible to XML External Entity XXE Injection. This means that an attacker could potentially...

The vulnerability of the User Interface sub-component of the Oracle Trade Management component in the Oracle E-Business Suite, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using th...

The vulnerability of the Service Enablement component in the JD Edwards World Technical Foundation software package allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Service Enablement component in the JD Edwards World Technical Foundation package is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

CVE-2019-2629

Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications subcomponent: User Interface. The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2637

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-2615

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2622

Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite subcomponent: Renewals. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2618

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2684

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-2622

Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite subcomponent: Renewals. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...