Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-2582	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Jan 15, 2020	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-1311	Apache Xerces C\+\+	Hig	0.53	8.1	0.10	Dec 18, 2019	The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be…
CVE-2019-16255	Ruby Lang Ruby	Hig	0.53	8.1	0.04	Nov 26, 2019	Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
CVE-2019-3017	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2019-3000	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2995	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2994	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2990	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2942	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Oct 16, 2019	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2937	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.53	8.1	0.02	Oct 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with…
CVE-2019-2934	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.53	8.1	0.01	Oct 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with…
CVE-2019-2906	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Oct 16, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-2891	Oracle Corporation Weblogic Server	Hig	0.53	8.1	0.02	Oct 16, 2019	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-9511	Fedoraproject Fedora	Hig	0.53	7.5	0.60	Aug 13, 2019	Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size…
CVE-2019-2867	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2019-2866	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.00	Jul 23, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2019-2841	Oracle Corporation Flexcube Investor Servicing	Hig	0.53	8.1	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2837	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2829	Oracle Corporation Isupport	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Service Requests). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2771	Oracle Corporation Bi Publisher	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2763	Oracle Corporation Food And Beverage Applications	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2754	Oracle Corporation Flexcube Universal Banking	Hig	0.53	8.1	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2019-2672	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2668	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2666	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2561	Oracle Corporation Retail Xstore Office	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3315	Oracle Corporation Retail Customer Management And Segmentation Foundation	Hig	0.53	8.2	0.01	Jul 23, 2019	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Customer). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2019-2706	Oracle Corporation Business Process Management Suite	Hig	0.53	8.2	0.02	Apr 23, 2019	Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: BPM Foundation Services). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2705	Oracle Corporation Outside In Technology	Hig	0.53	8.2	0.02	Apr 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2682	Oracle Corporation Applications Framework	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2677	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2675	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2671	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2665	Oracle Corporation Common Applications	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2664	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2663	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2662	Oracle Corporation Territory Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Territory Management component of Oracle E-Business Suite (subcomponent: Territory Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2661	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2660	Oracle Corporation Knowledge Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2655	Oracle Corporation Interaction Center Intelligence	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Business Intelligence (OLTP)). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2019-2654	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2653	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2652	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2651	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2643	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2642	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2641	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2640	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2639	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2619	Oracle Corporation Database Server	Hig	0.53	8.2	0.00	Apr 23, 2019	Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to…

CVE-2020-2582HigJan 15, 2020
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-1311HigDec 18, 2019
Apache
Xerces C\+\+
risk 0.53cvss 8.1epss 0.10
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be…
CVE-2019-16255HigNov 26, 2019
Ruby Lang
Ruby
risk 0.53cvss 8.1epss 0.04
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
CVE-2019-3017HigOct 16, 2019
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2019-3000HigOct 16, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2995HigOct 16, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2994HigOct 16, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2990HigOct 16, 2019
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2942HigOct 16, 2019
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2937HigOct 16, 2019
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with…
CVE-2019-2934HigOct 16, 2019
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with…
CVE-2019-2906HigOct 16, 2019
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-2891HigOct 16, 2019
Oracle Corporation
Weblogic Server
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-9511HigAug 13, 2019
Fedoraproject
Fedora
risk 0.53cvss 7.5epss 0.60
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size…
CVE-2019-2867HigJul 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2019-2866HigJul 23, 2019
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2019-2841HigJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2837HigJul 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2829HigJul 23, 2019
Oracle Corporation
Isupport
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Service Requests). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2771HigJul 23, 2019
Oracle Corporation
Bi Publisher
risk 0.53cvss 8.2epss 0.01
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2763HigJul 23, 2019
Oracle Corporation
Food And Beverage Applications
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2754HigJul 23, 2019
Oracle Corporation
Flexcube Universal Banking
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2019-2672HigJul 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2668HigJul 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2666HigJul 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2561HigJul 23, 2019
Oracle Corporation
Retail Xstore Office
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3315HigJul 23, 2019
Oracle Corporation
Retail Customer Management And Segmentation Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Customer). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2019-2706HigApr 23, 2019
Oracle Corporation
Business Process Management Suite
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: BPM Foundation Services). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2705HigApr 23, 2019
Oracle Corporation
Outside In Technology
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2682HigApr 23, 2019
Oracle Corporation
Applications Framework
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2677HigApr 23, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2675HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2671HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2665HigApr 23, 2019
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2664HigApr 23, 2019
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2663HigApr 23, 2019
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2662HigApr 23, 2019
Oracle Corporation
Territory Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Territory Management component of Oracle E-Business Suite (subcomponent: Territory Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability…
CVE-2019-2661HigApr 23, 2019
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2660HigApr 23, 2019
Oracle Corporation
Knowledge Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2655HigApr 23, 2019
Oracle Corporation
Interaction Center Intelligence
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Business Intelligence (OLTP)). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2019-2654HigApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2653HigApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2652HigApr 23, 2019
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2651HigApr 23, 2019
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2643HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2642HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2641HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2640HigApr 23, 2019
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2639HigApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2619HigApr 23, 2019
Oracle Corporation
Database Server
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to…

Page 45 of 270