CVE-2020-14759: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

PT-2020-4555

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Administration component. This can be exploited by a remote attacker t...

PT-2020-4442

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the Oracle Installed Base product of Oracle E-Business Suite,...

CVE-2020-14840: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14763: Undefined Security Weakness

Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise...

CVE-2020-14772: Undefined Security Weakness

Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion component: Shared Services. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Lifecycle Management...

PT-2020-4496

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Planning version 11.1.2.4 Description The issue is related to insufficient input validation in the Application Development Framework component. It allows a high-privileged attacker with network access via HTTP to compromise...

CVE-2020-14787: Undefined Security Weakness

Vulnerability in the Oracle Communications Diameter Signaling Router DSR product of Oracle Communications component: User Interface. Supported versions that are affected are 8.0.0.0-8.4.0.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2020-4491

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.5 and 5.6 Description The issue is related to insufficient input validation in the Logging component of Oracle Hospitality OPERA 5 Property Services. This easily exploitable vulnerability...

PT-2020-4635

Name of the Vulnerable Software and Affected Versions Oracle Communications Diameter Signaling Router DSR versions 8.0.0.0 through 8.4.0.5 Description The issue is related to insufficient input validation in the User Interface component of the Oracle Communications Diameter Signaling Router DSR...

PT-2020-4839

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the Cluster: NDBCluster Plugin component of the MySQL Cluster product. It allows a low-privileged attacker with network access via...

CVE-2020-14760: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2020-4634

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Secure Enterprise Search versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Search Integration Engine component. It allows an unauthenticated attacker wit...

PT-2020-4850

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue is related to insufficient input validation in the PIA Grids component. It allows an unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14761: Undefined Security Weakness

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14810: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications component: WebConnect. Supported versions that are affected are 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-14877: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14818: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...

PT-2020-4485

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Lifecycle Management version 11.1.2.4 Description The issue is related to insufficient input validation in the Shared Services component. It allows a high-privileged attacker with network access via HTTP to compromise Hyperion...

CVE-2020-14743: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to...