Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageGateway

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 8.0 used by IBM MessageGateway These issues were disclosed as part of the IBM Java SDK updates in July 2019. Vulnerability Details CVEID: CVE-2019-11775 DESCRIPTION: All builds of Eclipse OpenJ9 prior to 0.15 conta...

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a malicious actor to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data or compromise the integrity of...

The vulnerability of the libssh2 library, related to reading data beyond the buffer limit, allows an attacker to cause a service failure or gain unauthorized access to protected information.

The vulnerability of the libssh2 library lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or gain unauthorized access to protected information by connecting to an SSH server...

The vulnerability of the network web interface for controlling microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the network web interface for controlling Cisco SPA100 Series IP phones is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to read data...

CVE-2019-9699

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

Oracle Retail Applications Retail Customer Management and Segmentation Foundation Component Information Disclosure Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation Oracle. The product includes inventory management, sales management and customer management, etc. Retail Customer Management and Segmentation Foundation is one of the retail customer management...

Unspecified Vulnerability in Oracle Hyperion Hyperion Financial Reporting Component

Oracle Hyperion is a set of financial modeling applications from Oracle Oracle. The software provides financial settlement, report production, etc. Hyperion Financial Reporting is one of the financial statement management component. An unspecified vulnerability exists in the Oracle Hyperion...

OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

Unspecified Vulnerability in Oracle Retail Applications MICROS Relate CRM Software Component (CNVD-2019-39857)

Oracle Retail Applications is a suite of retail applications store solutions from Oracle. The product includes inventory management, sales management and customer management, etc. MICROS Relate CRM Software is one of the customer relationship management components. An unspecified vulnerability...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-38818)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-38814)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-37387)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to gain an unauthorized read of a portion of PeopleSoft Enterprise PeopleTools accessible...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-37389)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to unauthorized read, update, insert, or delete data, impacting the confidentiality and...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-37386)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to unauthorized update, insert, or delete certain PeopleSoft Enterprise PeopleTools...

PT-2019-14957

Name of the Vulnerable Software and Affected Versions WiKID 2FA Enterprise Server versions through 4.2.0-b2053 Description The issue allows authenticated users to execute arbitrary SQL commands via the source or subString parameter in Logs.jsp. This can lead to unauthorized data access and...

Oracle PeopleSoft Products PeopleSoft Enterprise SCM eProcurement Component Information Disclosure Vulnerability

Oracle PeopleSoft Products is a set of Oracle's Oracle enterprise human capital management solutions. The product provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eProcurement is one of the online procurement component. An...

Unspecified Vulnerability in Oracle Solaris (CNVD-2019-38538)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Filesystem component of Oracle Solaris 10 and 11. An attacker could use this vulnerability to unauthorized update, insert, or delete certain Oracle Solaris accessible data, and unauthorized read of a portion of...

Oracle Siebel CRM Siebel UI Framework Information Disclosure Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The program includes sales management, marketing management, customer service systems, call center modules. Siebel UI Framework is one of the user interface framework components. An...

CVE-2019-2999

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2019-2976

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...