CVE-2020-2749: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-2786: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2874: Undefined Security Weakness

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Customer Search. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successf...

CVE-2020-2867: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-2920: Undefined Security Weakness

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...

CVE-2020-2882: Undefined Security Weakness

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Hierarchy Diagrammers. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-2866: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2706: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

CVE-2020-2900: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: Tools. Supported versions that are affected are 19.3.1 and 20.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2020-2887: Undefined Security Weakness

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2020-2382

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking version 4.0 Description The issue affects the Transaction Processing component of Oracle FLEXCUBE Core Banking, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2020-2947: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft component: Absence Management. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2020-2189

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing an unauthenticated attacker with...

PT-2020-2119

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.6 through 12.2.9 Description The issue is related to inadequate access control in the Absence Recording and Maintenance components of Oracle Human Resources. It allows a low-privileged attacker with networ...

PT-2020-2136

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.0.9 Description The issue is related to inadequate access control in the Infrastructure component of Oracle Financial Services Analytical Applications...

CVE-2020-2760: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2020-2351

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Hedge Management and IFRS Valuations versions 8.0.6 through 8.0.8 Description The issue is related to the lack of protection for service data in the User Interface component of Oracle Financial Services Hedge Manageme...

PT-2020-2126

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Human Resources versions 12.1.1 through 12.1.3 Oracle E-Business Suite Human Resources versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Hierarchy Diagrammers component ...

PT-2020-2128

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-2190

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupplier Portal versions 12.1.3 and 12.2.5 through 12.2.9 Description The issue is related to a lack of protection for service data in the Oracle iSupplier Portal product. It allows an unauthenticated attacker...