CVE-2024-21133

CVE-2024-21133 affects Oracle Reports Developer (Servlet) in Oracle Fusion Middleware. The root cause is insufficient input validation in the Servlet component, impacting versions 12.2.1.4.0 through 12.2.1.19.0. An unauthenticated attacker with network access via HTTP can cause unauthorized read,...

CVE-2019-2413

CVE-2019-2413 affects Oracle Fusion Middleware’s Oracle Reports Developer component (subcomponent: Valid Session) in version 12.2.1.3. The flaw allows an unauthenticated attacker with network access over HTTP to compromise Oracle Reports Developer, with human interaction required for exploitation...

CVE-2020-2533

CVE-2020-2533 affects Oracle Fusion Middleware’s Oracle Reports Developer (component: Security and Authentication) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach Oracle Reports Developer over HTTP to compromise data, with the a...

CVE-2020-2534

CVE-2020-2534 affects Oracle Reports Developer (Security and Authentication) within Oracle Fusion Middleware. Affected: 12.2.1.3.0 and 12.2.1.4.0. Description: unauthenticated network access via HTTP can compromise Oracle Reports Developer; some data may be updated, inserted, deleted, or read. CV...