CVEs

408,769 total · page 5444 of 8,176

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-2889	Oracle Corporation CRM Technical Foundation	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2888	Oracle Corporation Marketing	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2887	Oracle Corporation Customer Interaction History	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2886	Oracle Corporation CRM Technical Foundation	Med	0.31	4.7	0.01		Apr 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2885	Oracle Corporation Document Management And Collaboration	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2020-2884	Oracle Corporation Weblogic Server	Cri	0.64	9.8	0.02		Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2883	Oracle Corporation Weblogic Server	Cri	0.86	9.8	0.95	KEV	Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2882	Oracle Corporation Human Resources	Hig	0.56	8.1	0.47		Apr 15, 2020	Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2020-2881	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2880	Oracle Corporation Learning Management	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: OTA Training Activities). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2879	Oracle Corporation Scripting	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2878	Oracle Corporation Isupport	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2877	Oracle Corporation Partner Management	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2876	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2020-2875	Fedoraproject Fedora	Med	0.31	4.7	0.02		Apr 15, 2020	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols…
CVE-2020-2874	Oracle Corporation Email Center	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Customer Search). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2873	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2872	Oracle Corporation Isupport	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2871	Oracle Corporation Advanced Outbound Telephony	Hig	0.59	8.2	0.66		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2870	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2869	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01		Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2868	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01		Apr 15, 2020	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2867	Oracle Corporation Weblogic Server	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2866	Oracle Corporation Applications Framework	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2865	Oracle Corporation Configurator	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2864	Oracle Corporation Isupplier Portal	Med	0.35	5.3	0.01		Apr 15, 2020	Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). Supported versions that are affected are 12.1.3 and 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2863	Oracle Corporation Advanced Outbound Telephony	Hig	0.55	8.5	0.01		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2862	Oracle Corporation One To One Fulfillment	Med	0.31	4.7	0.01		Apr 15, 2020	Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2861	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2860	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2859	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.49	7.5	0.02		Apr 15, 2020	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2858	Oracle Corporation Marketing	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2857	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2856	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2855	Oracle Corporation Isupport	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2854	Oracle Corporation Advanced Outbound Telephony	Hig	0.59	8.2	0.66		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2853	Fedoraproject Fedora	Med	0.32	4.9	0.02		Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2852	Oracle Corporation Advanced Outbound Telephony	Hig	0.59	8.2	0.66		Apr 15, 2020	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2851	Oracle Corporation Solaris	Hig	0.51	7.8	0.01		Apr 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…
CVE-2020-2850	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2849	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2848	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2847	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2846	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2845	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2844	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2843	Oracle Corporation Isupport	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2842	Oracle Corporation Depot Repair	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2841	Oracle Corporation Knowledge Management	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2840	Oracle Corporation E Business Intelligence	Hig	0.53	8.2	0.01		Apr 15, 2020	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

CVE-2020-2889MedApr 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2888MedApr 15, 2020
Oracle Corporation
Marketing
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2887MedApr 15, 2020
Oracle Corporation
Customer Interaction History
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2886MedApr 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2885HigApr 15, 2020
Oracle Corporation
Document Management And Collaboration
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2020-2884CriApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.64cvss 9.8epss 0.02
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2883CriKEVApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.86cvss 9.8epss 0.95
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2882HigApr 15, 2020
Oracle Corporation
Human Resources
risk 0.56cvss 8.1epss 0.47
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2020-2881HigApr 15, 2020
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2880HigApr 15, 2020
Oracle Corporation
Learning Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: OTA Training Activities). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2879HigApr 15, 2020
Oracle Corporation
Scripting
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2878HigApr 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2877HigApr 15, 2020
Oracle Corporation
Partner Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2876HigApr 15, 2020
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2020-2875MedApr 15, 2020
Fedoraproject
Fedora
risk 0.31cvss 4.7epss 0.02
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols…
CVE-2020-2874HigApr 15, 2020
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Customer Search). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2873HigApr 15, 2020
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2872HigApr 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2871HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.59cvss 8.2epss 0.66
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2870HigApr 15, 2020
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2869MedApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2868MedApr 15, 2020
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2867HigApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2866MedApr 15, 2020
Oracle Corporation
Applications Framework
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2865MedApr 15, 2020
Oracle Corporation
Configurator
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2864MedApr 15, 2020
Oracle Corporation
Isupplier Portal
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). Supported versions that are affected are 12.1.3 and 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2863HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.55cvss 8.5epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2862MedApr 15, 2020
Oracle Corporation
One To One Fulfillment
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-2861HigApr 15, 2020
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2860HigApr 15, 2020
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2859HigApr 15, 2020
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.49cvss 7.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2858HigApr 15, 2020
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2857HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2856HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2855HigApr 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2854HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.59cvss 8.2epss 0.66
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2853MedApr 15, 2020
Fedoraproject
Fedora
risk 0.32cvss 4.9epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2852HigApr 15, 2020
Oracle Corporation
Advanced Outbound Telephony
risk 0.59cvss 8.2epss 0.66
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2851HigApr 15, 2020
Oracle Corporation
Solaris
risk 0.51cvss 7.8epss 0.01
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…
CVE-2020-2850HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2849HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2848HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2847HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2846HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2845HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2844HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2843HigApr 15, 2020
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport.…
CVE-2020-2842HigApr 15, 2020
Oracle Corporation
Depot Repair
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2841HigApr 15, 2020
Oracle Corporation
Knowledge Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2840HigApr 15, 2020
Oracle Corporation
E Business Intelligence
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…