PT-2020-4493

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.1.2.4 Description The issue is related to insufficient input validation in the UI and Visualization component. It allows a high-privileged attacker with network access via HTTP to compromise...

PT-2020-4491

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This easily exploitable vulnerability...

PT-2020-4850

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the PIA Grids component. It allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2020-4495

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Lifecycle Management version 11.1.2.4 Description The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2020-4847

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the Integration Broker component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-4635

Name of the Vulnerable Software and Affected Versions Oracle Communications Diameter Signaling Router DSR versions 8.0.0.0 through 8.4.0.5 Description The issue is related to insufficient input validation in the User Interface component of the Oracle Communications Diameter Signaling Router DSR...

PT-2020-4409

Name of the Vulnerable Software and Affected Versions: Oracle Application Express versions prior to 20.2 Description: The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with SQL Workshop...

CVE-2020-14899: Undefined Security Weakness

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

CVE-2020-14761: Undefined Security Weakness

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14772: Undefined Security Weakness

Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion component: Shared Services. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management...

CVE-2020-14840: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14818: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...

CVE-2020-14760: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2020-4756

Name of the Vulnerable Software and Affected Versions: Oracle Utilities Framework versions 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 through 4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0 Description: The issue is related to insufficient access control in the Oracle Utilities Framework, allowing a remote...

PT-2020-4401

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c Description: The issue is related to insufficient input validation in the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and...

PT-2020-4755

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to inadequate access control in the Kernel component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris...

PT-2020-4841

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the Server: Security: Roles component of MySQL Server. This allows a high-privileged attacker with network access via multiple...

CVE-2020-1675

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

Authentication flaw

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

CVE-2020-1675 Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...