PT-2021-7206

Name of the Vulnerable Software and Affected Versions Oracle Database - Enterprise Edition Data Redaction versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server...

CVE-2021-2008

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2021-2867

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8 Description The issue is related to insufficient input validation in the Installation component of the Oracle ZFS Storage Appliance Kit. It allows a highly privileged attacker with logon access to t...

PT-2021-1889

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the APIs component of Oracle Installed Base, allowing an...

PT-2021-1735

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Revenue Management and Billing versions 2.9.0.0 through 2.9.0.1 Description: The issue is related to inadequate access control in the On Demand Billing component, allowing a low-privileged attacker with network acces...

CVE-2020-14651

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2020-14633

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

CVE-2020-14621

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2020-3884

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Pluggable Auth component of MySQL Server. This allows an attacker with network...

PT-2020-3458

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications...

CVE-2020-2785

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2810: Undefined Security Weakness

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

PT-2020-2526

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to inadequate access control in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTTP t...

PT-2020-2593

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Absence Management version 9.2 Description The issue is related to insufficient access controls in the Absence Management component of Oracle PeopleSoft Enterprise HCM Absence Management. This can be exploited by a...

PT-2020-2404

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 7.3.28 and prior Oracle MySQL Cluster versions 7.4.27 and prior Oracle MySQL Cluster versions 7.5.17 and prior Oracle MySQL Cluster versions 7.6.13 and prior Oracle MySQL Cluster versions 8.0.19 and prior...

CVE-2020-2731

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to...

CVE-2020-2590

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Authorization Bypass

mysql is vulnerable to authorization bypass. An easily exploitable vulnerability allows a low privileged attacker to perform unauthorized update, insert or delete of data and cause a denial of service condition...

CVE-2019-2819

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Audit. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2019-2730

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...