PT-2020-2535

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0 Description The issue is related to insufficient access control in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition, allowing a low-privileged attacker with networ...

Oracle Retail Customer Management and Segmentation Foundation Unauthorized Access Vulnerability

Oracle Retail Customer Management and Segmentation Foundation is a retail customer management product. An unspecified vulnerability exists in the Promotions component of Oracle Retail Customer Management and Segmentation Foundation 16.0. An attacker can exploit this vulnerability to gain...

CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

CVE-2020-2552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-04348)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to unauthorized update,...

PT-2020-1582

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2020-1506

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Attachments / File Upload component of the Oracle Applications Framework product. It allows an...

CVE-2019-2936

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTT...

Oracle Database Server Java VM Component Input Validation Error Vulnerability

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. An input validation error vulnerability exists in t...

Unspecified Vulnerability in Oracle E-Business Suite Workflow

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Workflow E-Business Suite is one...

Unspecified Vulnerability in Oracle Database Server Core RDBMS Component (CNVD-2019-37211)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An unspecified vulnerability exists in the...

PT-2019-3695

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2.4 Description The issue is related to inadequate access control in the Security Models component, allowing a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2019-3600

Name of the Vulnerable Software and Affected Versions Oracle Installed Base versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Engineering Change Order component of Oracle Installed Base in Oracle E-Business Suite. This can be exploited by a remote...

CVE-2019-11661: Undefined Security Weakness

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data...

CVE-2019-11669: Undefined Security Weakness

Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

PT-2019-16475

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Gift and Loyalty versions 9.0.0 through 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gift and Loyalty, resulting in unauthorized access to...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28442)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26527)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26665)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.26 and earlier, and the Server:...