CVE-2020-14556

CVE-2020-14556 and related CVEs (e.g., 14577, 14578, 14579, 14581, 14583, 14593, 14621, 14664) pertain to Oracle Java SE/OpenJDK/OpenJDK-derived runtimes across multiple components (Libraries, JSSE, 2D, JAXP, JavaFX, etc.). The primary 2020 issue affects Java SE and Java SE Embedded on various ve...

CVE-2020-14553

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2020-2562: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Investor Module. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2020-3278

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 through 18.0 Description The issue is related to insufficient input validation in the Segment component. It allows a low-privileged attacker with network access via HT...

PT-2020-3370

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Preferences component of Oracle CRM Technical Foundation. This allows a low-privileged attacker with...

CVE-2020-14684: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2020-3550

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56, 8.57, 8.58 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with network...

PT-2020-3884

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Pluggable Auth component of MySQL Server. This allows an attacker with network...

PT-2020-3458

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications...

CVE-2020-2817

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attac...

CVE-2020-2785

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2785

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2785

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

PT-2020-2120

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Workflow Notification Mailer component of Oracle Workflow, part of the Oracle E-Business Suite. This allow...

CVE-2020-2810: Undefined Security Weakness

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

CVE-2020-2800: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

CVE-2020-2744: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

PT-2020-2404

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 7.3.28 and prior Oracle MySQL Cluster versions 7.4.27 and prior Oracle MySQL Cluster versions 7.5.17 and prior Oracle MySQL Cluster versions 7.6.13 and prior Oracle MySQL Cluster versions 8.0.19 and prior...

PT-2020-2593

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Absence Management version 9.2 Description The issue is related to insufficient access controls in the Absence Management component of Oracle PeopleSoft Enterprise HCM Absence Management. This can be exploited by a...