CVE-2019-2615

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2618

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2684

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-2621

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Diagnostics. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2019-2622

Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite subcomponent: Renewals. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2568

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2019-2747

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle Email Center component, specifically the Message Display...

PT-2019-2143

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle iStore component, allowing an unauthenticated attacker with...

PT-2019-3267

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications MICROS Relate CRM Software version 11.4 Description The issue is related to inadequate access control in the Customer component of the MICROS Relate CRM Software. It allows a low-privileged attacker with network acce...

PT-2019-2748

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle Knowledge Management component, specifically in the Setup and...

PT-2019-3268

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Engagement versions 16.0 through 17.0 Description The issue is related to inadequate access control in the Segment component of Oracle Retail Customer Engagement, allowing a remote attacker with high privileges and netwo...

PT-2019-16450

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.5.1.0 through 8.5.1.7 Oracle Siebel CRM version 8.6.0 Oracle Siebel CRM version 8.6.1 Description The issue affects the Oracle Knowledge component, specifically the Web Applications InfoCenter subcomponent. It allo...

PT-2019-16445

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise ELM Enterprise Learning Management version 9.2 Description The issue affects the Application Search subcomponent, allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM...

CVE-2019-2659: Undefined Security Weakness

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...

PT-2019-16448

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 11.2.0.3 and 11.3.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Commerce Platform. Successful attacks require human interaction from a person...

PT-2019-2749

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.2.0.3 Description The issue is related to insufficient access control in the Dynamo Application Framework component of the Oracle Commerce Platform. It allows a remote attacker to modify, add, or delete data...

PT-2019-3117

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description The issue is related to inadequate access control in the Load Testing for Web Apps component. It allows a low-privileged attacker with network access via HTTP to compromise the Orac...

CVE-2019-2573: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2633: Undefined Security Weakness

Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2019-2638: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows low privileged...