Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-14684	Oracle Corporation Financial Services Analytical Applications Infrastructure	Med	0.28	4.3	0.01	Jul 15, 2020	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2020-14600	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.01	Jul 15, 2020	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-14566	Oracle Corporation Primavera Portfolio Management	Med	0.28	4.3	0.01	Jul 15, 2020	Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2020-14559	Oracle Corporation MySQL	Med	0.28	4.3	0.02	Jul 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-14553	Oracle Corporation MySQL	Med	0.28	4.3	0.02	Jul 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…
CVE-2020-14551	Oracle Corporation Autovue	Med	0.28	4.3	0.01	Jul 15, 2020	Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks…
CVE-2020-14544	Oracle Corporation Transportation Management	Med	0.28	4.3	0.01	Jul 15, 2020	Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2947	Oracle Corporation PeopleSoft Enterprise HCM Absence Management	Med	0.28	4.3	0.01	Apr 15, 2020	Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2869	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2745	Oracle Corporation Fusion Middleware	Med	0.28	4.3	0.01	Apr 15, 2020	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2738	Oracle Corporation Siebel CRM	Med	0.28	4.3	0.01	Apr 15, 2020	Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2020-2522	Oracle Corporation Knowledge	Med	0.28	4.3	0.01	Apr 15, 2020	Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2724	Oracle Corporation Flexcube Investor Servicing	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2719	Oracle Corporation Oracle Financial Services Applications	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2714	Oracle Corporation Banking Payments	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2700	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2687	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2561	Oracle Corporation PeopleSoft Enterprise HCM Human Resources	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2544	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2519	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Jan 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-3015	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2951	Oracle Corporation PeopleSoft Enterprise HCM Human Resources	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2925	Oracle Corporation Workflow	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2019-2898	Oracle Corporation Bi Publisher	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2887	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2734	Oracle Corporation Database Server	Med	0.28	4.3	0.01	Oct 16, 2019	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Execute on DBMS_ADVISOR privilege with network access via…
CVE-2019-2858	Oracle Corporation Fusion Middleware	Med	0.28	4.3	0.01	Jul 23, 2019	Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2733	Oracle Corporation Supply Chain Products Suite	Med	0.28	4.3	0.01	Jul 23, 2019	Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2728	Oracle Corporation Enterprise Manager Ops Center	Med	0.28	4.3	0.01	Jul 23, 2019	Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2019-13117	Xmlsoft Libxslt	Med	0.28	5.3	0.06	Jul 1, 2019	In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
CVE-2019-2701	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.28	4.3	0.01	Apr 23, 2019	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2700	Oracle Corporation Peoplesoft Enterprise	Med	0.28	4.3	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products (subcomponent: Enterprise Learning Mgmt). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2019-2586	Oracle Corporation Peoplesoft Products	Med	0.28	4.3	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2579	Oracle Corporation Webcenter Sites	Med	0.28	4.3	0.06	Apr 23, 2019	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2019-2573	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2564	Oracle Corporation Jd Edwards Enterpriseone	Med	0.28	4.3	0.01	Apr 23, 2019	Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2019-7317	Libpng Libpng	Med	0.28	5.3	0.09	Feb 4, 2019	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-2550	Oracle Corporation Flexcube Direct Banking	Med	0.28	4.3	0.01	Jan 16, 2019	Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2546	Oracle Corporation Applications Manager	Med	0.28	4.3	0.01	Jan 16, 2019	Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2415	Oracle Corporation Hyperion	Med	0.28	4.3	0.01	Jan 16, 2019	Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+.…
CVE-2019-2408	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2398	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Jan 16, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-3286	Oracle Corporation MySQL	Med	0.28	4.3	0.01	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-3269	Oracle Corporation Solaris	Med	0.28	4.3	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3147	Oracle Corporation Outside In Technology	Med	0.28	4.3	0.02	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3129	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3127	Oracle Corporation Demantra Demand Management	Med	0.28	4.3	0.01	Oct 17, 2018	Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions that are affected are 7.3.5 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2971	Oracle Corporation Applications Framework	Med	0.28	4.3	0.01	Oct 17, 2018	Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2902	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.02	Oct 17, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3105	Oracle Corporation Soa Suite	Med	0.28	4.3	0.01	Jul 18, 2018	Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged…

CVE-2020-14684MedJul 15, 2020
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2020-14600MedJul 15, 2020
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-14566MedJul 15, 2020
Oracle Corporation
Primavera Portfolio Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2020-14559MedJul 15, 2020
Oracle Corporation
MySQL
risk 0.28cvss 4.3epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-14553MedJul 15, 2020
Oracle Corporation
MySQL
risk 0.28cvss 4.3epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…
CVE-2020-14551MedJul 15, 2020
Oracle Corporation
Autovue
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks…
CVE-2020-14544MedJul 15, 2020
Oracle Corporation
Transportation Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2947MedApr 15, 2020
Oracle Corporation
PeopleSoft Enterprise HCM Absence Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2869MedApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2745MedApr 15, 2020
Oracle Corporation
Fusion Middleware
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2738MedApr 15, 2020
Oracle Corporation
Siebel CRM
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). Supported versions that are affected are 20.2 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2020-2522MedApr 15, 2020
Oracle Corporation
Knowledge
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2724MedJan 15, 2020
Oracle Corporation
Flexcube Investor Servicing
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2719MedJan 15, 2020
Oracle Corporation
Oracle Financial Services Applications
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2714MedJan 15, 2020
Oracle Corporation
Banking Payments
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2700MedJan 15, 2020
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2687MedJan 15, 2020
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-2561MedJan 15, 2020
Oracle Corporation
PeopleSoft Enterprise HCM Human Resources
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2544MedJan 15, 2020
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2020-2519MedJan 15, 2020
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-3015MedOct 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2951MedOct 16, 2019
Oracle Corporation
PeopleSoft Enterprise HCM Human Resources
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2925MedOct 16, 2019
Oracle Corporation
Workflow
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2019-2898MedOct 16, 2019
Oracle Corporation
Bi Publisher
risk 0.28cvss 4.3epss 0.01
Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2887MedOct 16, 2019
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2734MedOct 16, 2019
Oracle Corporation
Database Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Execute on DBMS_ADVISOR privilege with network access via…
CVE-2019-2858MedJul 23, 2019
Oracle Corporation
Fusion Middleware
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2733MedJul 23, 2019
Oracle Corporation
Supply Chain Products Suite
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2728MedJul 23, 2019
Oracle Corporation
Enterprise Manager Ops Center
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2019-13117MedJul 1, 2019
Xmlsoft
Libxslt
risk 0.28cvss 5.3epss 0.06
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.
CVE-2019-2701MedApr 23, 2019
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2700MedApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products (subcomponent: Enterprise Learning Mgmt). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2019-2586MedApr 23, 2019
Oracle Corporation
Peoplesoft Products
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2579MedApr 23, 2019
Oracle Corporation
Webcenter Sites
risk 0.28cvss 4.3epss 0.06
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2019-2573MedApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2564MedApr 23, 2019
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.28cvss 4.3epss 0.01
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2019-7317MedFeb 4, 2019
Libpng
Libpng
risk 0.28cvss 5.3epss 0.09
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-2550MedJan 16, 2019
Oracle Corporation
Flexcube Direct Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2546MedJan 16, 2019
Oracle Corporation
Applications Manager
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2415MedJan 16, 2019
Oracle Corporation
Hyperion
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+.…
CVE-2019-2408MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2398MedJan 16, 2019
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-3286MedOct 17, 2018
Oracle Corporation
MySQL
risk 0.28cvss 4.3epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-3269MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3147MedOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3129MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3127MedOct 17, 2018
Oracle Corporation
Demantra Demand Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions that are affected are 7.3.5 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2971MedOct 17, 2018
Oracle Corporation
Applications Framework
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2902MedOct 17, 2018
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3105MedJul 18, 2018
Oracle Corporation
Soa Suite
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged…

Page 106 of 201