PT-2019-3681

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

PT-2019-3597

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.34 and prior to 6.0.14 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized access to protected...

PT-2019-3749

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology product, which is a suite of software development kits SDKs. Th...

PT-2019-3704

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3719

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools product, specifically in the Portal component. It allows an unauthenticated...

PT-2019-3776

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3.0 Description The issue is related to inadequate access control in the Sample apps component of Oracle WebLogic Server, part of Oracle Fusion Middleware. This allows an unauthenticated attacker with...

PT-2019-3695

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2.4 Description The issue is related to inadequate access control in the Security Models component, allowing a high-privileged attacker with network access via HTTP to compromise Hyperion...

PT-2019-3690

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access control in the SMF services & legacy daemons component of Oracle Solaris. It allows a low-privileged attacker with logon access to the infrastructure where Oracl...

PT-2019-3583

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Performance Monitor subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2019-3722

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Workflow product, specifically the Worklist component. It allows an unauthenticated attacker with...

PT-2019-3727

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Fluid Core subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2019-3676

Name of the Vulnerable Software and Affected Versions Java SE versions 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Description A difficult to exploit vulnerability in the Scripting component of Java SE and Java SE Embedded allows an unauthenticated attacker with network access via multip...

PT-2019-3696

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, 13 Java SE Embedded version 8u221 Description The issue is related to insufficient access control in the Libraries component of Java SE and Java SE Embedded, allowing an unauthenticated attacker with...

keycloak: cross-realm user access auth bypass

A flaw was found in the Keycloak REST API where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks...

CVE-2018-3211

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Serviceability. Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2018-10894

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks...

CVE-2018-2581

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

wildfly-security-manager: security manager authorization bypass

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...

CVE-2019-12684

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...