Lucene search
K

18 matches found

OSV
OSV
added 2025/05/21 10:15 p.m.2 views

CVE-2025-34026

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is kno...

7.5CVSS7.5AI score0.71079EPSS
Exploits1References3
OSV
OSV
added 2021/04/22 10:15 p.m.0 views

CVE-2021-2227

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...

8.1CVSS6.8AI score0.01221EPSS
Exploits0References1
OSV
OSV
added 2021/04/22 10:15 p.m.0 views

CVE-2021-2236

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Advanced Global Intercompany. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

8.1CVSS6.8AI score
Exploits0References1
OSV
OSV
added 2020/04/15 2:15 p.m.1 views

CVE-2020-2807

Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite component: Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.2CVSS7.3AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2019/09/09 6:15 p.m.20 views

CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

5.3CVSS6.1AI score0.00169EPSS
Exploits1References2
OSV
OSV
added 2019/09/09 6:15 p.m.1 views

UBUNTU-CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

5.3CVSS6AI score0.00169EPSS
Exploits1References3
CNVD
CNVD
added 2018/10/18 12:0 a.m.2 views

Oracle Retail Applications MICROS Retail-J Component Override Access Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. An over-the-horizon access vulnerability exists in the Back Office subcomponent of the MICROS Retail-J component of...

6.5CVSS6.8AI score0.00496EPSS
Exploits0References1
OSV
OSV
added 2018/07/18 1:29 p.m.0 views

CVE-2018-3008

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

8.2CVSS7.3AI score
Exploits0References3
OSV
OSV
added 2017/10/19 5:29 p.m.1 views

CVE-2017-10410

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: Search. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network...

8.2CVSS7.3AI score
Exploits0References3
CNVD
CNVD
added 2017/05/11 12:0 a.m.1 views

F5 BIG-IP APM Cross-Site Scripting Vulnerability

The F5 BIG-IP is a load balancer that uses a variety of distribution algorithms to distribute network requests to available servers in a server cluster, enabling network visitors to have the best possible networking experience by managing incoming Web data traffic and increasing effective network...

6.1CVSS6.2AI score0.00295EPSS
Exploits0References1
OSV
OSV
added 2017/01/27 10:59 p.m.0 views

CVE-2017-3436

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

8.2CVSS7.3AI score0.00845EPSS
Exploits0References2
OSV
OSV
added 2017/01/27 10:59 p.m.0 views

CVE-2017-3426

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

8.2CVSS7.3AI score
Exploits0References2
OSV
OSV
added 2017/01/27 10:59 p.m.2 views

CVE-2017-3365

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

8.2CVSS7.3AI score
Exploits0References2
OSV
OSV
added 2017/01/27 10:59 p.m.2 views

CVE-2017-3275

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

8.2CVSS7.3AI score
Exploits0References3
CNVD
CNVD
added 2016/01/28 12:0 a.m.2 views

Unspecified Vulnerability in Oracle GoldenGate Component

Oracle GoldenGate is the United States Oracle Oracle company for the realization of heterogeneous IT environments between the log-based real-time changes in data capture and delivery of a comprehensive software package, which supports the capture, operation and analysis of data replication betwee...

10CVSS7.2AI score0.11887EPSS
Exploits0References1
OSV
OSV
added 2016/01/21 3:2 a.m.1 views

CVE-2016-0577

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

5.8AI score
Exploits0References3
OSV
OSV
added 2016/01/21 3:2 a.m.0 views

CVE-2016-0573

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service...

5.8AI score
Exploits0References3
OSV
OSV
added 2016/01/21 3:1 a.m.0 views

CVE-2016-0552

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0545,...

7.3AI score0.00311EPSS
Exploits0References2
Rows per page
Query Builder