CVE-2020-2767: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

CVE-2020-2514: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

CVE-2020-2887: Undefined Security Weakness

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2594: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

PT-2020-2189

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing an unauthenticated attacker with...

Oracle E-Business Suite One-to-One Fulfillment Information Disclosure Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

CVE-2020-2866: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2935: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

PT-2020-2350

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Liquidity Risk Management version 8.0.6 Description The issue is related to the User Interfaces component of Oracle Financial Services Liquidity Risk Management, allowing a low-privileged attacker with network access...

PT-2020-2369

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Loan Loss Forecasting and Provisioning versions 8.0.6 through 8.0.8 Description The issue is related to a lack of protection for service data in the User Interface component of Oracle Financial Services Loan Loss...

CVE-2020-2799: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: GraalVM Compiler. Supported versions that are affected are 19.3.1 and 20.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Orac...

CVE-2020-2940: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2964: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2936: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2020-2129

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Outcome-Result component of Oracle Customer Interaction History,...

CVE-2020-2553: Undefined Security Weakness

Vulnerability in the Oracle Knowledge product of Oracle Knowledge component: Information Manager Console. Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successfu...

Unspecified Vulnerability in Oracle iSupport (CNVD-2020-27007)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

PT-2020-2119

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.6 through 12.2.9 Description The issue is related to inadequate access control in the Absence Recording and Maintenance components of Oracle Human Resources. It allows a low-privileged attacker with networ...

PT-2020-2116

Name of the Vulnerable Software and Affected Versions Oracle Email Center versions 12.1.1 through 12.1.3 Oracle Email Center versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Message Display component of Oracle Email Center, part of the Oracle...

PT-2020-2123

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.3 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.17.0 Primavera P6 Enterprise Project Portfolio Management versions...