CVE-2019-2493: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37399)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Login subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

PT-2019-1394

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle Mobile Field Service component, specifically the Administration subcomponent. It allows an...

CVE-2019-2491: Undefined Security Weakness

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: Message Display. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

PT-2019-16411

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony version 2.10 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks can result in unauthorized update, insert, or delete...

CVE-2019-2403: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful...

CVE-2019-2533: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Serve...

Oracle Fusion Middleware Web Cache Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments.Web Cache is one of the server gas pedal i.e., reverse proxy components. An access control error vulnerability exists in Oracle Fusion Middleware Web Cache. An...

Oracle MySQL Connectors Access Control Error Vulnerability (CNVD-2020-02561)

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. An access control error...

PT-2019-16416

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks can result in...

CVE-2019-2407: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2019-2409: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2019-2538: Undefined Security Weakness

Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware subcomponent: MFT Runtime Server. Supported versions that are affected are 19.1.0.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27283)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

PT-2019-1268

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, which can be exploited to gain unauthorized...

CVE-2019-2421: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products subcomponent: Guided Self Service. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2411: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via TCP t...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28460)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

CVE-2019-2487: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: UI Infrastructure. Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37397)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...