CVE-2020-2977: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application...

PT-2020-3865

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions prior to 11.3.1 Description: The issue is related to insufficient input validation in the Dynamo Application Framework component of the Oracle Commerce Platform. It allows an unauthenticated attacker with...

PT-2020-3332

Name of the Vulnerable Software and Affected Versions Oracle E-Business Intelligence versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the DBI Setups component of Oracle E-Business Intelligence, allowing a remote attacker to gain read, modify, add, ...

CVE-2020-14643: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2020-14651: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

Unspecified Vulnerability in Oracle Construction and Engineering Primavera Unifier

Oracle Primavera Unifier is a project lifecycle management solution for capital planning, project delivery, cost control, and facilities and real estate management, providing management of all project phases from planning and construction to operations and maintenance. A security vulnerability...

PT-2020-3588

Name of the Vulnerable Software and Affected Versions Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description The issue is related to insufficient input validati...

PT-2020-3552

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Infrastructure component of Oracle Financial Services Analytical Application...

PT-2020-3591

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

PT-2020-3862

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue is related to insufficient input...

PT-2020-3868

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Service Center versions 11.1, 11.2 and prior to 11.3.1 Description: The issue exists due to insufficient input validation in the Commerce Service Center module of the Oracle Commerce platform. This allows a remote attacker to...

PT-2020-3243

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue is related to insufficient input validation in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with a valid user...

CVE-2020-14564: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Environment Mgmt Console. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-14717: Undefined Security Weakness

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

PT-2020-3549

Name of the Vulnerable Software and Affected Versions Oracle CRM Gateway for Mobile Devices versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Setup of Mobile Applications component. This can be exploited by a remote attacker to gain unauthoriz...

CVE-2020-14574: Undefined Security Weakness

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14545: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-14599: Undefined Security Weakness

Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite component: Setup of Mobile Applications. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2020-2513: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

CVE-2020-14532: Undefined Security Weakness

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...