CVEs

129,916 total · page 2208 of 2,599

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-10711	Hisilicon Hi3510 Firmware	Hig	0.49	7.5	0.01		Apr 23, 2019	Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware (until Webware version V1.0.1) allows attackers to view an RTSP stream by connecting to the stream with hidden credentials (guest or user) that are neither displayed…
CVE-2019-10710	Hisilicon Hi3510 Firmware	Hig	0.57	8.8	0.01		Apr 23, 2019	Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE,…
CVE-2019-2723	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2722	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2721	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2706	Oracle Corporation Business Process Management Suite	Hig	0.53	8.2	0.02		Apr 23, 2019	Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: BPM Foundation Services). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2705	Oracle Corporation Outside In Technology	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2703	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2698	Microfocus Xp7 Command View	Hig	0.57	8.1	0.12		Apr 23, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2697	Microfocus Xp7 Command View	Hig	0.57	8.1	0.11		Apr 23, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2696	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2690	Oracle Corporation VM Virtualbox	Hig	0.51	7.8	0.00		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2019-2682	Oracle Corporation Applications Framework	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2680	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2679	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2677	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2675	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2671	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2665	Oracle Corporation Common Applications	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2664	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2663	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2662	Oracle Corporation Territory Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Territory Management component of Oracle E-Business Suite (subcomponent: Territory Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2661	Oracle Corporation Email Center	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2660	Oracle Corporation Knowledge Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2657	Oracle Corporation VM Virtualbox	Hig	0.51	7.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2656	Oracle Corporation VM Virtualbox	Hig	0.57	8.8	0.01		Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2655	Oracle Corporation Interaction Center Intelligence	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Business Intelligence (OLTP)). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2019-2654	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2653	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2652	Oracle Corporation Istore	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2651	Oracle Corporation Email Center	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2650	Oracle Corporation Weblogic Server	Hig	0.52	7.5	0.39		Apr 23, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2649	Oracle Corporation Weblogic Server	Hig	0.52	7.5	0.37		Apr 23, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2648	Oracle Corporation Weblogic Server	Hig	0.49	7.5	0.02		Apr 23, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2647	Oracle Corporation Weblogic Server	Hig	0.49	7.5	0.02		Apr 23, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2643	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2642	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2641	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2640	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2639	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2632	Oracle Corporation MySQL	Hig	0.49	7.5	0.04		Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2019-2619	Oracle Corporation Database Server	Hig	0.53	8.2	0.00		Apr 23, 2019	Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to…
CVE-2019-2616	Oracle Corporation Fusion Middleware	Hig	0.69	7.2	0.92	KEV	Apr 23, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2608	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Apr 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2604	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2603	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2602	McAfee Epolicy Orchestrator	Hig	0.49	7.5	0.04		Apr 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-2601	Oracle Corporation Fusion Middleware	Hig	0.49	7.6	0.01		Apr 23, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2019-2600	Oracle Corporation Email Center	Hig	0.53	8.2	0.01		Apr 23, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2598	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.57	8.7	0.01		Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

CVE-2019-10711HigApr 23, 2019
Hisilicon
Hi3510 Firmware
risk 0.49cvss 7.5epss 0.01
Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware (until Webware version V1.0.1) allows attackers to view an RTSP stream by connecting to the stream with hidden credentials (guest or user) that are neither displayed…
CVE-2019-10710HigApr 23, 2019
Hisilicon
Hi3510 Firmware
risk 0.57cvss 8.8epss 0.01
Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE,…
CVE-2019-2723HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2722HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2721HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2706HigApr 23, 2019
Oracle Corporation
Business Process Management Suite
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: BPM Foundation Services). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2705HigApr 23, 2019
Oracle Corporation
Outside In Technology
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2703HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2698HigApr 23, 2019
Microfocus
Xp7 Command View
risk 0.57cvss 8.1epss 0.12
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2697HigApr 23, 2019
Microfocus
Xp7 Command View
risk 0.57cvss 8.1epss 0.11
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2696HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2690HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.51cvss 7.8epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2019-2682HigApr 23, 2019
Oracle Corporation
Applications Framework
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2680HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2679HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2677HigApr 23, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2675HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2671HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2665HigApr 23, 2019
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2664HigApr 23, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2663HigApr 23, 2019
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2662HigApr 23, 2019
Oracle Corporation
Territory Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Territory Management component of Oracle E-Business Suite (subcomponent: Territory Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2661HigApr 23, 2019
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2660HigApr 23, 2019
Oracle Corporation
Knowledge Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2657HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.51cvss 7.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2656HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.57cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2655HigApr 23, 2019
Oracle Corporation
Interaction Center Intelligence
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Business Intelligence (OLTP)). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2019-2654HigApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2653HigApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2652HigApr 23, 2019
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2651HigApr 23, 2019
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2650HigApr 23, 2019
Oracle Corporation
Weblogic Server
risk 0.52cvss 7.5epss 0.39
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2649HigApr 23, 2019
Oracle Corporation
Weblogic Server
risk 0.52cvss 7.5epss 0.37
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2648HigApr 23, 2019
Oracle Corporation
Weblogic Server
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2647HigApr 23, 2019
Oracle Corporation
Weblogic Server
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2643HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2642HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2641HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2640HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2639HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2632HigApr 23, 2019
Oracle Corporation
MySQL
risk 0.49cvss 7.5epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2019-2619HigApr 23, 2019
Oracle Corporation
Database Server
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to…
CVE-2019-2616HigKEVApr 23, 2019
Oracle Corporation
Fusion Middleware
risk 0.69cvss 7.2epss 0.92
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2608HigApr 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2604HigApr 23, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2603HigApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2602HigApr 23, 2019
McAfee
Epolicy Orchestrator
risk 0.49cvss 7.5epss 0.04
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-2601HigApr 23, 2019
Oracle Corporation
Fusion Middleware
risk 0.49cvss 7.6epss 0.01
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2019-2600HigApr 23, 2019
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2598HigApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.57cvss 8.7epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…