Oracle WebLogic Server Component Access Control Error Vulnerability (CNVD-2019-27103)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27769)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

PT-2019-2833

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to insufficient access control in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically in the Outside In Filters subcomponent. This...

PT-2019-2840

Name of the Vulnerable Software and Affected Versions Oracle Clusterware version 12.1.0.2.0 Description The issue is related to insufficient access control in the Trace File Analyzer TFA Collector component of Oracle Clusterware, allowing an unauthenticated attacker with network access via multip...

Oracle BI Publisher Component Access Control Error Vulnerability (CNVD-2019-29188)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

PT-2019-2845

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Planning version 11.1.2.4 Description The issue is related to inadequate access control in the Security component of Oracle Hyperion Planning, allowing a high-privileged attacker with network access via HTTP to compromise the...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27774)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28442)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28435)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30453)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

PT-2019-2844

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 11.1.2.3.0 and 12.2.1.3.0 Description The issue is related to inadequate access control in the Advanced Console subcomponent of Oracle Identity Manager, part of Oracle Fusion Middleware. This allows a...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26754)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26753)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28431)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle Solaris Critical Patch Update : jul2019_SRU11_4_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows...

PT-2019-5301

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, specifically the Outside In Filters subcomponent. It allows an unauthenticated attacker wit...

PT-2019-4921

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description The issue is related to inadequate access control in the MySQL Server component, specifically in the Server: Audit Plug-in subcomponent. It allows a...

PT-2019-16458

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.44 and prior Oracle MySQL versions 5.7.18 and prior Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in...

PT-2019-16494 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized update, insert, or delete...

CVE-2018-14866

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs...