Oracle Outside In Technology Access Control Error Vulnerability (CNVD-2019-27784)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

PT-2019-2020

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to inadequate access control in the WLS Core Components subcomponent of Oracle WebLogic Server, allowing a low-privileged attacker with network...

PT-2019-2016

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 and 8.57 Description The issue is related to inadequate access control in the Fluid Homepage & Navigation subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker...

PT-2019-2019

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM version 19.3 Description The issue is related to inadequate access control in the Siebel Core - Server BizLogic Script component, allowing a high-privileged attacker with network access via HTTP to compromise the component...

PT-2019-1957

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55, 8.56, and 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated attacker with networ...

PT-2019-1944

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Print Server subcomponent of Oracle One-to-One Fulfillment. It allow...

PT-2019-1880

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component, specifically in the Preferences...

PT-2019-1853

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Trade Management component, specifically in the User...

PT-2019-1961

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to insufficient access control in the Oracle Work in Process component, specifically the Messages...

PT-2019-1885

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing...

PT-2019-1856

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise ELM version 9.2 Description The issue is related to inadequate access control in the Enterprise Learning Mgmt component of PeopleSoft Enterprise ELM. This can be exploited by a remote attacker to gain unauthorized access ...

PT-2019-1946

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access control in the BI Publisher Security component of Oracle Fusion Middleware. It allows a remote attacker t...

PT-2019-1943

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle Marketing component, specifically the Marketing Administratio...

PT-2019-1929

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to insufficient access control in the WLS Core Components of Oracle WebLogic Server, allowing a remote attacker to modify, add, or delete...

PT-2019-1879

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing Administration...

PT-2019-1872

Name of the Vulnerable Software and Affected Versions Java SE versions 7u211, 8u202, 11.0.2, 12 Java SE Embedded version 8u201 Description The issue is related to the RMI component of Oracle Java SE and Java SE Embedded, which is associated with inadequate access control. This allows an...

The vulnerability of the Reflect.construct processing mechanism in the V8 JavaScript script handler of Google Chrome browser allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Reflect.construct processing mechanism in Google Chrome’s JavaScript scripting engine is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially crafted HTML page...

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a perpetrator to cause a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a hacker to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data using the HTTP protocol...