CVE-2019-2568

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2019-16450

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.5.1.0 through 8.5.1.7 Oracle Siebel CRM version 8.6.0 Oracle Siebel CRM version 8.6.1 Description The issue affects the Oracle Knowledge component, specifically the Web Applications InfoCenter subcomponent. It allo...

PT-2019-3267

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications MICROS Relate CRM Software version 11.4 Description The issue is related to inadequate access control in the Customer component of the MICROS Relate CRM Software. It allows a low-privileged attacker with network acce...

PT-2019-3268

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Engagement versions 16.0 through 17.0 Description The issue is related to inadequate access control in the Segment component of Oracle Retail Customer Engagement, allowing a remote attacker with high privileges and netwo...

PT-2019-2749

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.2.0.3 Description The issue is related to insufficient access control in the Dynamo Application Framework component of the Oracle Commerce Platform. It allows a remote attacker to modify, add, or delete data...

PT-2019-16448

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 11.2.0.3 and 11.3.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Commerce Platform. Successful attacks require human interaction from a person...

PT-2019-2748

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle Knowledge Management component, specifically in the Setup and...

CVE-2019-2719: Undefined Security Weakness

Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM subcomponent: Web Applications InfoCenter. Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2707: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products subcomponent: Application Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2019-16445

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise ELM Enterprise Learning Management version 9.2 Description The issue affects the Application Search subcomponent, allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise ELM...

CVE-2019-2684: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-2659: Undefined Security Weakness

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...

PT-2019-2747

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle Email Center component, specifically the Message Display...

PT-2019-2143

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle iStore component, allowing an unauthenticated attacker with...

PT-2019-3117

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description The issue is related to inadequate access control in the Load Testing for Web Apps component. It allows a low-privileged attacker with network access via HTTP to compromise the Orac...

CVE-2019-2616: Undefined Security Weakness

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2019-2557: Undefined Security Weakness

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite subcomponent: Load Testing for Web Apps. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3314: Undefined Security Weakness

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Customer. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software...

CVE-2019-2705: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2676: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Preferences. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network...