PT-2019-3696

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, 13 Java SE Embedded version 8u221 Description The issue is related to insufficient access control in the Libraries component of Java SE and Java SE Embedded, allowing an unauthenticated attacker with...

PT-2019-3583

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Performance Monitor subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with...

PT-2019-3622

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Content Manager component. It allows an unauthenticated...

PT-2019-3690

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access control in the SMF services & legacy daemons component of Oracle Solaris. It allows a low-privileged attacker with logon access to the infrastructure where Oracl...

PT-2019-3704

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3717

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools, allowing a remote attacker to modify, add, or delet...

PT-2019-3727

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Fluid Core subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network...

PT-2019-3749

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology product, which is a suite of software development kits SDKs. Th...

PT-2019-3711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. It allows a remote...

PT-2019-3600

Name of the Vulnerable Software and Affected Versions Oracle Installed Base versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Engineering Change Order component of Oracle Installed Base in Oracle E-Business Suite. This can be exploited by a remote...

PT-2019-3597

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.34 and prior to 6.0.14 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized access to protected...

PT-2019-3676

Name of the Vulnerable Software and Affected Versions Java SE versions 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Description A difficult to exploit vulnerability in the Scripting component of Java SE and Java SE Embedded allows an unauthenticated attacker with network access via multip...

PT-2019-3719

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools product, specifically in the Portal component. It allows an unauthenticated...

PT-2019-3722

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Workflow product, specifically the Worklist component. It allows an unauthenticated attacker with...

PT-2019-3681

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

PT-2019-3776

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3.0 Description The issue is related to inadequate access control in the Sample apps component of Oracle WebLogic Server, part of Oracle Fusion Middleware. This allows an unauthenticated attacker with...

keycloak: cross-realm user access auth bypass

A flaw was found in the Keycloak REST API where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks...

CVE-2018-3211

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Serviceability. Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2018-10894

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks...

CVE-2018-2581

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...