PT-2020-1554

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. It allows an unauthenticat...

PT-2020-1586

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product, allowing an unauthenticated attacker wi...

PT-2020-1342

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to inadequate access control in the Core component of Oracle Banking Payments, allowing a low-privileged attacker with network access via HTTP to compromis...

PT-2020-1426

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to a vulnerability in the Enterprise Manager Base Platform product, specifically in the Host Management component. This vulnerability can be easil...

PT-2020-1339

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to inadequate access control in the Core component of Oracle Banking Payments, allowing a low-privileged attacker with network access via HTTP to compromis...

PT-2020-1474

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Field Service versions 12.1.1 through 12.1.3 Oracle E-Business Suite Oracle Field Service versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Field Service...

PT-2020-1469

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle One-to-One Fulfillment product, specifically in the Call...

PT-2020-1340

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to insufficient access control in the Core component of Oracle Banking Payments, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-1442

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the System Monitoring component of the Enterprise Manager Base Platform product. It allows a...

PT-2020-1505

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 18.0 Description The issue is related to inadequate access control in the Security component of the Oracle Retail Customer Management and Segmentation Foundation product. It...

PT-2020-1585

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient access control in the Attachments / File Upload component of the Oracle Applications Framework product. It allows an unauthenticated attack...

PT-2020-1526

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 10.3.6.0.0 Description The issue is related to insufficient access control in the WLS Core Components of Oracle WebLogic Server, allowing a high-privileged attacker with network access via HTTP to compromise the...

PT-2020-1472

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Elastic Search component of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2020-1582

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component. It allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2020-1446

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component of PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with...

PT-2020-1332

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0 Description The issue is related to insufficient access control in the Infrastructure component of Oracle...

PT-2020-1410

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 16.0 Description The issue is related to inadequate access control in the Promotions component, allowing an unauthenticated attacker with network access via HTTP to compromi...

PT-2020-1447

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component of PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with...

CVE-2019-4559

IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 166355...

OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...