Oracle MySQL Server Access Control Error Vulnerability (CNVD-2020-22354)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An Access Control Error vulnerability exists in Oracle MySQL Server. An attacker could exploit this vulnerability to gain unauthorized access to data...

CVE-2019-2400: Undefined Security Weakness

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with networ...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27283)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

PT-2019-1395

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.3 Description The issue is related to insufficient access control in the WLS - Deployment component of Oracle WebLogic Server, allowing a low-privileged attacker with network access vi...

PT-2019-1336

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component. It allows an unauthenticated attacker wit...

PT-2019-1195

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle CRM Technical Foundation component, specifically in the Messages subcomponent...

CVE-2019-2396: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2496: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2423: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2019-1272

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.24 Oracle VM VirtualBox versions prior to 6.0.2 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, which can be exploited to gain unauthoriz...

PT-2019-16415

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.8 Description The issue allows a low-privileged attacker with network access via TCP to compromise the system. Successful attacks require human interaction from a perso...

PT-2019-1313

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM eProfile Manager Desktop version 9.2 Description The issue is related to insufficient access control in the Guided Self Service component of PeopleSoft Enterprise HCM eProfile Manager Desktop. It allows an...

PT-2019-16417

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community versions 9.0 and 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. It requires human interaction from a...

CVE-2018-3125: Undefined Security Weakness

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3304: Undefined Security Weakness

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite subcomponent: Load Testing for Web Apps. Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2492: Undefined Security Weakness

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: Message Display. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2401: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2019-2490: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2485: Undefined Security Weakness

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2413: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...