Unspecified Vulnerability in Oracle Customer Interaction History (CNVD-2020-54684)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and other management software collection, is seamlessly integrated with a management suite. oracle Customer...

CVE-2020-2955: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications component: Transaction Processing. The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle Database Server Unauthorized Access Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

PT-2020-2190

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupplier Portal versions 12.1.3 and 12.2.5 through 12.2.9 Description The issue is related to a lack of protection for service data in the Oracle iSupplier Portal product. It allows an unauthenticated attacker...

CVE-2020-2816

A flaw was found in the TLS/SSL implementation in the JSSE component of OpenJDK, where it did not properly handle application data packets received before the handshake completion. This flaw allowed unauthorized injection of data at the beginning of a TLS session...

Google Chrome Use-After-Free

The vulnerability of Google Chrome relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

Google Chrome Skia Information Disclosure

The vulnerability of Google Chrome’s Skia graphics library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity through a specially created HTML page...

PT-2020-2579

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Diagnostic Framework component of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2020-2495 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This can be exploite...

PT-2020-2292

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions prior to 19.2 Description The issue is related to inadequate access control in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with network access via...

PT-2020-2532

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 11.1.1.9.0 Description The issue is related to insufficient access control in the Web Listener component of Oracle HTTP Server, allowing an unauthenticated attacker with network access via HTTP to compromise the...

PT-2020-2535

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0 Description The issue is related to insufficient access control in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition, allowing a low-privileged attacker with networ...

PT-2020-2525

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access control in the Web Container component of Oracle WebLogic Server, allowing an unauthenticated attacker with network acce...

PT-2020-2297

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the Admin component of the Oracle iSupport product. It allows an unauthenticated attacker with network access via HTTP to...

PT-2020-2626

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.3.7, 6.4.2, and 6.4.3 Description The issue is related to inadequate access control in the Security component of Oracle Transportation Management. It allows a low-privileged attacker with network...

PT-2020-2306

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2573

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with network...

PT-2020-2577

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Process Scheduler component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker wi...

PT-2020-2608

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Candidate Gateway component of PeopleSoft Enterprise HRMS, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-2493

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 11.1.2.3.0 and 12.2.1.3.0 Description The issue is related to insufficient access control in the SSO Engine component of Oracle Access Manager, allowing a low-privileged attacker with network access via HTTP to...