Vendor CVEs

Oracle Corporation

All CVEs

10,062 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-35728	Fasterxml Jackson Databind	Hig	0.47	8.1	0.13	Dec 27, 2020	FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
CVE-2020-17117	Oracle Corporation Exchange	Med	0.47	6.6	0.49	Dec 10, 2020	Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-14828	Oracle Corporation Mysql Server	Hig	0.47	7.2	0.02	Oct 21, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2020-14724	Oracle Corporation Solaris	Hig	0.47	7.3	0.00	Jul 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-14718	Oracle Corporation GraalVM Enterprise Edition	Hig	0.47	7.2	0.01	Jul 15, 2020	Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Supported versions that are affected are 19.3.2 and 20.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14697	Oracle Corporation Mysql Server	Hig	0.47	7.2	0.02	Jul 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14696	Oracle Corporation Bi Publisher	Hig	0.47	7.2	0.01	Jul 15, 2020	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14678	Oracle Corporation Mysql Server	Hig	0.47	7.2	0.02	Jul 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14663	Oracle Corporation Mysql Server	Hig	0.47	7.2	0.02	Jul 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14571	Oracle Corporation Bi Publisher	Hig	0.47	7.2	0.01	Jul 15, 2020	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2020-14561	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.47	7.3	0.00	Jul 15, 2020	Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2020-14543	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.47	7.3	0.00	Jul 15, 2020	Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2020-2963	Oracle Corporation Weblogic Server	Hig	0.47	7.2	0.01	Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2798	Oracle Corporation Weblogic Server	Hig	0.47	7.2	0.08	Apr 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2556	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.47	7.3	0.00	Jan 15, 2020	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily…
CVE-2020-2549	Oracle Corporation Weblogic Server	Hig	0.47	7.2	0.02	Jan 15, 2020	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2019-2944	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.01	Oct 16, 2019	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2019-2907	Oracle Corporation Web Services	Hig	0.47	7.2	0.01	Oct 16, 2019	Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for Java). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2820	Oracle Corporation Solaris	Hig	0.47	7.3	0.00	Jul 23, 2019	Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…
CVE-2019-2804	Oracle Corporation Solaris	Hig	0.47	7.3	0.01	Jul 23, 2019	Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2019-2767	Oracle Corporation Bi Publisher	Hig	0.47	7.2	0.05	Jul 23, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2742	Oracle Corporation Bi Publisher	Hig	0.47	7.2	0.01	Jul 23, 2019	Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2679	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.01	Apr 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2462	Oracle Corporation Outside In Technology	Hig	0.47	7.2	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2443	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2019-2433	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2019-2406	Oracle Corporation Database Server	Hig	0.47	7.2	0.02	Jan 16, 2019	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access…
CVE-2018-3192	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2018-3179	Oracle Corporation Identity Manager	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3165	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2018-2578	Oracle Corporation Solaris	Hig	0.47	7.2	0.00	Jan 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3588	Oracle Corporation Solaris Cluster	Hig	0.47	7.3	0.01	Oct 19, 2017	Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris…
CVE-2017-10408	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Oct 19, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10407	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Oct 19, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10392	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Oct 19, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10362	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10242	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10241	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10240	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10239	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10238	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10237	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10236	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10234	Oracle Corporation Solaris Cluster	Hig	0.47	7.3	0.01	Aug 8, 2017	Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…
CVE-2017-10233	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10210	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00	Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10031	Oracle Corporation Communications Convergence	Hig	0.47	7.2	0.02	Aug 8, 2017	Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications (subcomponent: Mail Proxy (dojo)). Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3548	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.47	6.5	0.26	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3531	Oracle Corporation Weblogic Server	Hig	0.47	7.2	0.02	Apr 24, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3486	Oracle Corporation SQL Plus	Hig	0.47	7.2	0.00	Apr 24, 2017	Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus…

CVE-2020-35728HigDec 27, 2020
Fasterxml
Jackson Databind
risk 0.47cvss 8.1epss 0.13
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
CVE-2020-17117MedDec 10, 2020
Oracle Corporation
Exchange
risk 0.47cvss 6.6epss 0.49
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-14828HigOct 21, 2020
Oracle Corporation
Mysql Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2020-14724HigJul 15, 2020
Oracle Corporation
Solaris
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-14718HigJul 15, 2020
Oracle Corporation
GraalVM Enterprise Edition
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Supported versions that are affected are 19.3.2 and 20.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14697HigJul 15, 2020
Oracle Corporation
Mysql Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14696HigJul 15, 2020
Oracle Corporation
Bi Publisher
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14678HigJul 15, 2020
Oracle Corporation
Mysql Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14663HigJul 15, 2020
Oracle Corporation
Mysql Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-14571HigJul 15, 2020
Oracle Corporation
Bi Publisher
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2020-14561HigJul 15, 2020
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2020-14543HigJul 15, 2020
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2020-2963HigApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2020-2798HigApr 15, 2020
Oracle Corporation
Weblogic Server
risk 0.47cvss 7.2epss 0.08
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2020-2556HigJan 15, 2020
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily…
CVE-2020-2549HigJan 15, 2020
Oracle Corporation
Weblogic Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2019-2944HigOct 16, 2019
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2019-2907HigOct 16, 2019
Oracle Corporation
Web Services
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for Java). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2820HigJul 23, 2019
Oracle Corporation
Solaris
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…
CVE-2019-2804HigJul 23, 2019
Oracle Corporation
Solaris
risk 0.47cvss 7.3epss 0.01
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2019-2767HigJul 23, 2019
Oracle Corporation
Bi Publisher
risk 0.47cvss 7.2epss 0.05
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2742HigJul 23, 2019
Oracle Corporation
Bi Publisher
risk 0.47cvss 7.2epss 0.01
Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2679HigApr 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2462HigJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2443HigJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2019-2433HigJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2019-2406HigJan 16, 2019
Oracle Corporation
Database Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access…
CVE-2018-3192HigOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2018-3179HigOct 17, 2018
Oracle Corporation
Identity Manager
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3165HigOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2018-2578HigJan 18, 2018
Oracle Corporation
Solaris
risk 0.47cvss 7.2epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3588HigOct 19, 2017
Oracle Corporation
Solaris Cluster
risk 0.47cvss 7.3epss 0.01
Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris…
CVE-2017-10408HigOct 19, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10407HigOct 19, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10392HigOct 19, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10362HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10242HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10241HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10240HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10239HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10238HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10237HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10236HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10234HigAug 8, 2017
Oracle Corporation
Solaris Cluster
risk 0.47cvss 7.3epss 0.01
Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…
CVE-2017-10233HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10210HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10031HigAug 8, 2017
Oracle Corporation
Communications Convergence
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications (subcomponent: Mail Proxy (dojo)). Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3548MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 6.5epss 0.26
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3531HigApr 24, 2017
Oracle Corporation
Weblogic Server
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3486HigApr 24, 2017
Oracle Corporation
SQL Plus
risk 0.47cvss 7.2epss 0.00
Vulnerability in the SQL*Plus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQL*Plus…

Page 37 of 202