Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-14898	Linux Kernel	Hig	0.46	7.0	0.00	May 8, 2020	The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or…
CVE-2020-1967	OpenSSL Project OpenSSL	Hig	0.46	7.5	0.53	Apr 21, 2020	Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or…
CVE-2020-2964	Oracle Corporation Financial Services Data Foundation	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2945	Oracle Corporation Financial Services Deposit Insurance Calculations For Liquidity Risk Management	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability…
CVE-2020-2943	Oracle Corporation Financial Services Liquidity Risk Measurement And Management	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability allows low…
CVE-2020-2942	Oracle Corporation Financial Services Price Creation And Discovery	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2941	Oracle Corporation Financial Services Funds Transfer Pricing	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2940	Oracle Corporation Financial Services Profitability Management	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2939	Oracle Corporation Financial Services Asset Liability Management	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2938	Oracle Corporation Financial Services Loan Loss Forecasting And Provisioning	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2937	Oracle Corporation Insurance Accounting Analyzer	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2020-2936	Oracle Corporation Financial Services Balance Sheet Planning	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2935	Oracle Corporation Financial Services Hedge Management And Ifrs Valuations	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2914	Oracle Corporation VM Virtualbox	Hig	0.46	7.0	0.00	Apr 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2020-2913	Oracle Corporation VM Virtualbox	Hig	0.46	7.0	0.00	Apr 15, 2020	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2020-2891	Oracle Corporation Financial Services Liquidity Risk Management	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). The supported version that is affected is 8.0.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2793	Oracle Corporation Financial Services Analytical Applications Infrastructure	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged…
CVE-2020-2782	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.46	7.1	0.01	Apr 15, 2020	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-11620	Fasterxml Jackson Databind	Hig	0.46	8.1	0.06	Apr 7, 2020	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
CVE-2020-11619	Fasterxml Jackson Databind	Hig	0.46	8.1	0.04	Apr 7, 2020	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
CVE-2020-2723	Oracle Corporation Flexcube Investor Servicing	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2718	Oracle Corporation Banking Corporate Lending	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2713	Oracle Corporation Banking Payments	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2699	Oracle Corporation Flexcube Universal Banking	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2688	Oracle Corporation Financial Services Analytical Applications Infrastructure	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2675	Oracle Corporation Hospitality Opera 5	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2020-2605	Oracle Corporation Solaris	Hig	0.46	7.1	0.00	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2538	Oracle Corporation Webcenter Sites	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2537	Oracle Corporation Business Intelligence	Hig	0.46	7.1	0.01	Jan 15, 2020	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-14822	Ibus Project Ibus	Hig	0.46	7.1	0.00	Nov 25, 2019	A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a…
CVE-2019-2953	Oracle Corporation Hospitality Cruise Dining Room Management	Hig	0.46	7.1	0.01	Oct 16, 2019	Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications (component: Web Service). The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2947	Oracle Corporation Food And Beverage Applications	Hig	0.46	7.1	0.01	Oct 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Inventory Integration privilege with…
CVE-2019-2871	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00	Jul 23, 2019	Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2870	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00	Jul 23, 2019	Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2869	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00	Jul 23, 2019	Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2868	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00	Jul 23, 2019	Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2800	Oracle Corporation MySQL	Hig	0.46	7.1	0.02	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2760	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00	Jul 23, 2019	Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2748	Oracle Corporation Peoplesoft Products	Hig	0.46	7.1	0.01	Jul 23, 2019	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network…
CVE-2019-1003049	Jenkins Project Jenkins	Hig	0.46	8.1	0.02	Apr 10, 2019	Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject…
CVE-2019-2538	Oracle Corporation Managed File Transfer	Hig	0.46	7.1	0.01	Jan 16, 2019	Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server). Supported versions that are affected are 19.1.0.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2534	NetApp Snapcenter	Hig	0.46	7.1	0.02	Jan 16, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2019-2429	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3302	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3234	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3233	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3232	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3231	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3230	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3229	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

CVE-2019-14898HigMay 8, 2020
Linux
Kernel
risk 0.46cvss 7.0epss 0.00
The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or…
CVE-2020-1967HigApr 21, 2020
OpenSSL Project
OpenSSL
risk 0.46cvss 7.5epss 0.53
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or…
CVE-2020-2964HigApr 15, 2020
Oracle Corporation
Financial Services Data Foundation
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2945HigApr 15, 2020
Oracle Corporation
Financial Services Deposit Insurance Calculations For Liquidity Risk Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability…
CVE-2020-2943HigApr 15, 2020
Oracle Corporation
Financial Services Liquidity Risk Measurement And Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability allows low…
CVE-2020-2942HigApr 15, 2020
Oracle Corporation
Financial Services Price Creation And Discovery
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2941HigApr 15, 2020
Oracle Corporation
Financial Services Funds Transfer Pricing
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2940HigApr 15, 2020
Oracle Corporation
Financial Services Profitability Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2939HigApr 15, 2020
Oracle Corporation
Financial Services Asset Liability Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2938HigApr 15, 2020
Oracle Corporation
Financial Services Loan Loss Forecasting And Provisioning
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2937HigApr 15, 2020
Oracle Corporation
Insurance Accounting Analyzer
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2020-2936HigApr 15, 2020
Oracle Corporation
Financial Services Balance Sheet Planning
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2935HigApr 15, 2020
Oracle Corporation
Financial Services Hedge Management And Ifrs Valuations
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2914HigApr 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2020-2913HigApr 15, 2020
Oracle Corporation
VM Virtualbox
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2020-2891HigApr 15, 2020
Oracle Corporation
Financial Services Liquidity Risk Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). The supported version that is affected is 8.0.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2793HigApr 15, 2020
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged…
CVE-2020-2782HigApr 15, 2020
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.46cvss 7.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2020-11620HigApr 7, 2020
Fasterxml
Jackson Databind
risk 0.46cvss 8.1epss 0.06
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
CVE-2020-11619HigApr 7, 2020
Fasterxml
Jackson Databind
risk 0.46cvss 8.1epss 0.04
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
CVE-2020-2723HigJan 15, 2020
Oracle Corporation
Flexcube Investor Servicing
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2718HigJan 15, 2020
Oracle Corporation
Banking Corporate Lending
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2020-2713HigJan 15, 2020
Oracle Corporation
Banking Payments
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2020-2699HigJan 15, 2020
Oracle Corporation
Flexcube Universal Banking
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2020-2688HigJan 15, 2020
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged…
CVE-2020-2675HigJan 15, 2020
Oracle Corporation
Hospitality Opera 5
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2020-2605HigJan 15, 2020
Oracle Corporation
Solaris
risk 0.46cvss 7.1epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2020-2538HigJan 15, 2020
Oracle Corporation
Webcenter Sites
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2020-2537HigJan 15, 2020
Oracle Corporation
Business Intelligence
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-14822HigNov 25, 2019
Ibus Project
Ibus
risk 0.46cvss 7.1epss 0.00
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a…
CVE-2019-2953HigOct 16, 2019
Oracle Corporation
Hospitality Cruise Dining Room Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications (component: Web Service). The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2947HigOct 16, 2019
Oracle Corporation
Food And Beverage Applications
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Inventory Integration privilege with…
CVE-2019-2871HigJul 23, 2019
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2870HigJul 23, 2019
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2869HigJul 23, 2019
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2868HigJul 23, 2019
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2800HigJul 23, 2019
Oracle Corporation
MySQL
risk 0.46cvss 7.1epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2760HigJul 23, 2019
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2019-2748HigJul 23, 2019
Oracle Corporation
Peoplesoft Products
risk 0.46cvss 7.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network…
CVE-2019-1003049HigApr 10, 2019
Jenkins Project
Jenkins
risk 0.46cvss 8.1epss 0.02
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject…
CVE-2019-2538HigJan 16, 2019
Oracle Corporation
Managed File Transfer
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server). Supported versions that are affected are 19.1.0.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2019-2534HigJan 16, 2019
NetApp
Snapcenter
risk 0.46cvss 7.1epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2019-2429HigJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3302HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3234HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3233HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3232HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3231HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3230HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3229HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

Page 84 of 270