CVEs

129,958 total · page 2099 of 2,600

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1929	Apache Beam	Hig	0.42	7.5	0.01	Jan 15, 2020	The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally…
CVE-2019-18271	Osisoft Pi Vision	Hig	0.57	8.8	0.01	Jan 15, 2020	OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.
CVE-2019-15961	ClamAV Clamav	Hig	0.49	7.5	0.03	Jan 15, 2020	A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing…
CVE-2015-1811	Jenkins Project Cloudbees	Hig	0.49	7.5	0.01	Jan 15, 2020	XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.
CVE-2015-1809	Jenkins Project Cloudbees	Hig	0.49	7.5	0.01	Jan 15, 2020	XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
CVE-2014-6448	Juniper Networks Junos	Hig	0.51	7.8	0.00	Jan 15, 2020	Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.
CVE-2020-2728	Oracle Corporation Identity Manager	Hig	0.49	7.5	0.02	Jan 15, 2020	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2726	Oracle Corporation VM Virtualbox	Hig	0.49	7.5	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2723	Oracle Corporation Flexcube Investor Servicing	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2718	Oracle Corporation Banking Corporate Lending	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2713	Oracle Corporation Banking Payments	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2702	Oracle Corporation VM Virtualbox	Hig	0.49	7.5	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2701	Oracle Corporation VM Virtualbox	Hig	0.49	7.5	0.01	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2699	Oracle Corporation Flexcube Universal Banking	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2698	Oracle Corporation VM Virtualbox	Hig	0.49	7.5	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2696	Oracle Corporation Solaris	Hig	0.57	8.8	0.01	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-2688	Oracle Corporation Financial Services Analytical Applications Infrastructure	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2682	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2675	Oracle Corporation Hospitality Opera 5	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2020-2674	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.00	Jan 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2673	Oracle Corporation Application Testing Suite	Hig	0.49	7.5	0.02	Jan 15, 2020	Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2672	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2671	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2670	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2669	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2665	Oracle Corporation Isupport	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2662	Oracle Corporation Isupport	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2661	Oracle Corporation Isupport	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2658	Oracle Corporation Isupport	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2653	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2652	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2651	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2605	Oracle Corporation Solaris	Hig	0.46	7.1	0.00	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2604	McAfee Epolicy Orchestrator	Hig	0.53	8.1	0.05	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2020-2591	Oracle Corporation Web Applications Desktop Integrator	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS…
CVE-2020-2582	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2565	Oracle Corporation Solaris	Hig	0.49	7.5	0.00	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes…
CVE-2020-2556	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.47	7.3	0.00	Jan 15, 2020	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily…
CVE-2020-2549	Oracle Corporation Weblogic Server	Hig	0.47	7.2	0.02	Jan 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2020-2543	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01	Jan 15, 2020	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2538	Oracle Corporation Webcenter Sites	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2537	Oracle Corporation Business Intelligence	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2518	Oracle Corporation Database Server	Hig	0.49	7.5	0.01	Jan 15, 2020	Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via…
CVE-2020-2511	Oracle Corporation Database Server	Hig	0.50	7.7	0.01	Jan 15, 2020	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to…
CVE-2020-2510	Oracle Corporation Database Server	Hig	0.49	7.5	0.02	Jan 15, 2020	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Core RDBMS.…
CVE-2019-16469	Adobe Inc. Experience Manager	Hig	0.50	7.5	0.17	Jan 15, 2020	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2019-16468	Adobe Inc. Experience Manager	Hig	0.49	7.5	0.03	Jan 15, 2020	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2015-6497	Magento Magento	Hig	0.58	8.8	0.07	Jan 15, 2020	The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via…
CVE-2015-5230	PowerDNS Authoritative	Hig	0.49	7.5	0.09	Jan 15, 2020	The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets.
CVE-2020-2098	Jenkins Project Sounds	Hig	0.57	8.8	0.01	Jan 15, 2020	A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

CVE-2020-1929HigJan 15, 2020
Apache
Beam
risk 0.42cvss 7.5epss 0.01
The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally…
CVE-2019-18271HigJan 15, 2020
Osisoft
Pi Vision
risk 0.57cvss 8.8epss 0.01
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.
CVE-2019-15961HigJan 15, 2020
ClamAV
Clamav
risk 0.49cvss 7.5epss 0.03
A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing…
CVE-2015-1811HigJan 15, 2020
Jenkins Project
Cloudbees
risk 0.49cvss 7.5epss 0.01
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.
CVE-2015-1809HigJan 15, 2020
Jenkins Project
Cloudbees
risk 0.49cvss 7.5epss 0.01
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
CVE-2014-6448HigJan 15, 2020
Juniper Networks
Junos
risk 0.51cvss 7.8epss 0.00
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.
CVE-2020-2728HigJan 15, 2020
Oracle Corporation
Identity Manager
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2726HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2723HigJan 15, 2020
Oracle Corporation
Flexcube Investor Servicing
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2718HigJan 15, 2020
Oracle Corporation
Banking Corporate Lending
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2713HigJan 15, 2020
Oracle Corporation
Banking Payments
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2702HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2701HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.49cvss 7.5epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2699HigJan 15, 2020
Oracle Corporation
Flexcube Universal Banking
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2698HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2020-2696HigJan 15, 2020
Oracle Corporation
Solaris
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-2688HigJan 15, 2020
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2682HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2675HigJan 15, 2020
Oracle Corporation
Hospitality Opera 5
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2020-2674HigJan 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2020-2673HigJan 15, 2020
Oracle Corporation
Application Testing Suite
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2672HigJan 15, 2020
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2671HigJan 15, 2020
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2670HigJan 15, 2020
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2669HigJan 15, 2020
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2665HigJan 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2662HigJan 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2661HigJan 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2658HigJan 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2020-2653HigJan 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2652HigJan 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2651HigJan 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2605HigJan 15, 2020
Oracle Corporation
Solaris
risk 0.46cvss 7.1epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2604HigJan 15, 2020
McAfee
Epolicy Orchestrator
risk 0.53cvss 8.1epss 0.05
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2020-2591HigJan 15, 2020
Oracle Corporation
Web Applications Desktop Integrator
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS…
CVE-2020-2582HigJan 15, 2020
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2020-2565HigJan 15, 2020
Oracle Corporation
Solaris
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes…
CVE-2020-2556HigJan 15, 2020
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily…
CVE-2020-2549HigJan 15, 2020
Oracle Corporation
Weblogic Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2020-2543HigJan 15, 2020
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2538HigJan 15, 2020
Oracle Corporation
Webcenter Sites
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2537HigJan 15, 2020
Oracle Corporation
Business Intelligence
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2518HigJan 15, 2020
Oracle Corporation
Database Server
risk 0.49cvss 7.5epss 0.01
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via…
CVE-2020-2511HigJan 15, 2020
Oracle Corporation
Database Server
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to…
CVE-2020-2510HigJan 15, 2020
Oracle Corporation
Database Server
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Core RDBMS.…
CVE-2019-16469HigJan 15, 2020
Adobe Inc.
Experience Manager
risk 0.50cvss 7.5epss 0.17
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2019-16468HigJan 15, 2020
Adobe Inc.
Experience Manager
risk 0.49cvss 7.5epss 0.03
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2015-6497HigJan 15, 2020
Magento
Magento
risk 0.58cvss 8.8epss 0.07
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via…
CVE-2015-5230HigJan 15, 2020
PowerDNS
Authoritative
risk 0.49cvss 7.5epss 0.09
The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets.
CVE-2020-2098HigJan 15, 2020
Jenkins Project
Sounds
risk 0.57cvss 8.8epss 0.01
A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.