CVE-2019-2487: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: UI Infrastructure. Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37397)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27286)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

CVE-2019-2436: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Oracle MySQL Server Access Control Error Vulnerability (CNVD-2020-22354)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An Access Control Error vulnerability exists in Oracle MySQL Server. An attacker could exploit this vulnerability to gain unauthorized access to data...

Oracle Outside In Technology Access Control Error Vulnerability (CNVD-2019-27762)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

PT-2019-1272

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, which can be exploited to gain unauthoriz...

PT-2019-16415

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.8 Description The issue allows a low-privileged attacker with network access via TCP to compromise the system. Successful attacks require human interaction from a perso...

PT-2019-1313

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM eProfile Manager Desktop version 9.2 Description The issue is related to insufficient access control in the Guided Self Service component of PeopleSoft Enterprise HCM eProfile Manager Desktop. It allows an...

PT-2019-16417

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community versions 9.0 and 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. It requires human interaction from a...

CVE-2018-3125: Undefined Security Weakness

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3304: Undefined Security Weakness

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite subcomponent: Load Testing for Web Apps. Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2492: Undefined Security Weakness

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: Message Display. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2401: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2019-2396: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2490: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2423: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2463: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2485: Undefined Security Weakness

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2417: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...