ByteOS

cpe:2.3:a:oracle:e-business_intelligence:11.5.10.2:*:*:*:*:*:*:*

>>e-business_intelligence>>11.5.10.2

cpe:2.3:a:oracle:e-business_intelligence:12.1.1:*:*:*:*:*:*:*

>>e-business_intelligence>>12.1.1

cpe:2.3:a:oracle:e-business_intelligence:12.1.2:*:*:*:*:*:*:*

>>e-business_intelligence>>12.1.2

cpe:2.3:a:oracle:e-business_intelligence:12.1.3:*:*:*:*:*:*:*

>>e-business_intelligence>>12.1.3

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	secalert_us@oracle.com	Vendor Advisory
http://www.securitytracker.com/id/1034726	secalert_us@oracle.com	N/A
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securitytracker.com/id/1034726	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Source: secalert_us@oracle.com

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1034726

Source: secalert_us@oracle.com

Resource: N/A

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1034726

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

465Records found

CVE-2020-2888

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:54

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-marketing Marketing

CVE-2020-29582

Matching Score-8

Assigner-MITRE Corporation

Product-kotlin communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_policy communications_cloud_native_core_service_communication_proxy n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.3||MEDIUM

EPSS-0.00% / 0.15%

7 Day CHG~0.00%

Published-03 Feb, 2021 | 15:20

Updated-25 Feb, 2026 | 10:50

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Vendor-n/a JetBrains s.r.o.Oracle Corporation

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2020-2889

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:54

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-customer_relationship_management_technical_foundation CRM Technical Foundation

CVE-2020-29505

Matching Score-8

Assigner-Dell

Product-bsafe_micro-edition-suite bsafe_crypto-c-micro-edition retail_customer_insights Dell BSAFE Crypto-C Micro Edition

Matching Score-8

Assigner-Dell

CVSS Score-7.1||HIGH

EPSS-0.48% / 65.44%

7 Day CHG~0.00%

Published-11 Jul, 2022 | 19:25

Updated-16 Sep, 2024 | 22:09

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key Management Error Vulnerability.

Vendor-Oracle Corporation Dell Inc.

CWE ID-CWE-331

Insufficient Entropy

CVE-2010-0914

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-0.32% / 55.18%

7 Day CHG~0.00%

Published-13 Jul, 2010 | 22:07

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging.

Product-sun_convergence n/a

CVE-2016-8324

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.72% / 72.59%

7 Day CHG~0.00%

Published-27 Jan, 2017 | 22:01

Updated-13 May, 2026 | 00:24

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).

Product-flexcube_core_banking FLEXCUBE Core Banking

CWE ID-CWE-284

Improper Access Control

CVE-2011-4091

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5||MEDIUM

EPSS-0.56% / 68.64%

7 Day CHG~0.00%

Published-10 Feb, 2014 | 17:00

Updated-29 Apr, 2026 | 01:13

The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.

Vendor-armin_burgmeier n/a Oracle Corporation openSUSE

Product-solaris opensuse net6 n/a

CWE ID-CWE-287

Improper Authentication

CVE-2016-8977

Matching Score-8

Assigner-IBM Corporation

Vendor-IBM Corporation Oracle Corporation Linux Kernel Organization, Inc HP Inc.Microsoft Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.3||MEDIUM

EPSS-0.23% / 46.09%

7 Day CHG~0.00%

Published-01 Feb, 2017 | 22:00

Updated-13 May, 2026 | 00:24

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.

Product-hp-ux license_metric_tool solaris aix windows bigfix_inventory linux_kernel BigFix Inventory

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2010-0068

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-0.43% / 62.88%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 01:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.

Product-bea_product_suite n/a

CVE-2010-0067

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-0.66% / 71.40%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 01:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via unknown vectors.

Product-application_server n/a

CVE-2016-6797

Matching Score-8

Matching Score-8

Vendor-Canonical Ltd.Oracle Corporation The Apache Software Foundation Red Hat, Inc.Debian GNU/Linux NetApp, Inc.

CVSS Score-7.5||HIGH

EPSS-0.34% / 56.75%

7 Day CHG~0.00%

Published-10 Aug, 2017 | 22:00

Updated-13 May, 2026 | 00:24

The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.

Product-enterprise_linux_eus debian_linux snap_creator_framework ubuntu_linux oncommand_shift enterprise_linux_server enterprise_linux_workstation tomcat enterprise_linux_server_tus jboss_enterprise_web_server enterprise_linux_desktop tekelec_platform_distribution enterprise_linux_server_aus oncommand_insight Apache Tomcat

CWE ID-CWE-863

Incorrect Authorization

CVE-2016-8307

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.72% / 72.59%

7 Day CHG~0.00%

Published-27 Jan, 2017 | 22:01

Updated-13 May, 2026 | 00:24

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).

Product-flexcube_universal_banking FLEXCUBE Universal Banking

CWE ID-CWE-284

Improper Access Control

CVE-2020-2949

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:46

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-coherence Coherence

CVE-2016-6794

Matching Score-8

Matching Score-8

Vendor-Canonical Ltd.Oracle Corporation The Apache Software Foundation Red Hat, Inc.Debian GNU/Linux NetApp, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.26% / 49.88%

7 Day CHG~0.00%

Published-10 Aug, 2017 | 16:00

Updated-13 May, 2026 | 00:24

When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.

Product-debian_linux snap_creator_framework ubuntu_linux enterprise_linux_server enterprise_linux_workstation oncommand_insight tomcat oncommand_shift enterprise_linux_server_tus jboss_enterprise_web_server enterprise_linux_desktop tekelec_platform_distribution enterprise_linux_server_aus enterprise_linux_eus Apache Tomcat

CVE-2016-5575

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.23% / 45.26%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.

Product-common_applications n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-284

Improper Access Control

CVE-2020-2766

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.43% / 80.89%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-weblogic_server WebLogic Server

CVE-2016-5842

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.39% / 80.58%

7 Day CHG~0.00%

Published-13 Dec, 2016 | 15:00

Updated-06 May, 2026 | 22:30

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.

Vendor-n/a Oracle Corporation ImageMagick Studio LLC

Product-solaris imagemagick n/a

CWE ID-CWE-125

Out-of-bounds Read

CVE-2016-5566

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.31% / 54.02%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.

Product-solaris n/a

CWE ID-CWE-284

Improper Access Control

CVE-2020-2865

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:01

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-configurator Configurator

CVE-2010-0075

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-0.43% / 62.88%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 01:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.

Product-e-business_suite n/a

CVE-2010-0861

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-0.91% / 76.03%

7 Day CHG~0.00%

Published-13 Apr, 2010 | 22:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality via unknown vectors.

Product-e-business_suite n/a

CVE-2020-2864

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.37% / 80.43%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:01

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). Supported versions that are affected are 12.1.3 and 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupplier Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-isupplier_portal iSupplier Portal

CVE-2022-21346

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-4.33% / 89.01%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:25

Updated-24 Sep, 2024 | 20:20

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-bi_publisher BI Publisher (formerly XML Publisher)

CVE-2022-21300

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-2.33% / 85.00%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-24 Sep, 2024 | 20:26

Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS SA Integration Pack. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS SA Integration Pack accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-peoplesoft_enterprise_cs_sa_integration_pack PeopleSoft Enterprise CS SA Integration Pack

CVE-2022-21421

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-4.81% / 89.60%

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:37

Updated-24 Sep, 2024 | 20:12

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions that are affected are 5.5.0.0.0, 5.9.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-business_intelligence Business Intelligence Enterprise Edition

CVE-2022-21476

Matching Score-8

Assigner-Oracle

Product-bootstrap_os openjdk active_iq_unified_manager cloud_insights_acquisition_unit jdk hci_compute_node element_software solidfire santricity_unified_manager debian_linux graalvm zulu hci_management_node e-series_santricity_os_controller e-series_santricity_storage_manager e-series_santricity_web_services cloud_secure_agent oncommand_insight Java SE JDK and JRE

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-0.18% / 39.76%

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:38

Updated-03 Aug, 2024 | 02:38

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vendor-azul Debian GNU/Linux NetApp, Inc.Oracle Corporation

CVE-2022-21387

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.77% / 73.73%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:26

Updated-24 Sep, 2024 | 20:16

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-commerce_platform Commerce Platform

CVE-2020-2728

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-5.66% / 90.45%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:48

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Identity Manager accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-identity_manager Identity Manager

CVE-2022-21371

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-93.42% / 99.82%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:26

Updated-24 Sep, 2024 | 20:18

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-weblogic_server WebLogic Server

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2022-21282

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.13% / 32.36%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-03 Aug, 2024 | 02:38

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Vendor-Debian GNU/Linux NetApp, Inc.Oracle Corporation

CVE-2022-21500

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-93.74% / 99.86%

7 Day CHG-0.25%

Published-19 May, 2022 | 23:55

Updated-24 Sep, 2024 | 20:05

Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. Note: Authentication is required for successful attack, however the user may be self-registered. <br> <br>Oracle E-Business Suite 12.1 is not impacted by this vulnerability. Customers should refer to the Patch Availability Document for details. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-user_management e-business_suite User Management

CVE-2022-21292

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-5.23% / 90.04%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-24 Sep, 2024 | 20:26

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-weblogic_server WebLogic Server

CVE-2020-2838

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-8.6||HIGH

EPSS-1.62% / 82.04%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:05

Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway for Mobile Devices. While the vulnerability is in Oracle CRM Gateway for Mobile Devices, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Gateway for Mobile Devices accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

Product-customer_relationship_management_gateway_for_mobile_devices CRM Gateway for Mobile Devices

CVE-2022-21466

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-1.73% / 82.68%

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:38

Updated-24 Sep, 2024 | 20:08

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-commerce_guided_search Commerce Guided Search / Oracle Commerce Experience Manager

CVE-2020-2595

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.8||MEDIUM

EPSS-0.87% / 75.39%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 16:29

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

Product-graalvm GraalVM Enterprise Edition

CVE-2022-21364

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.94% / 76.48%

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:25

Updated-24 Sep, 2024 | 20:18

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-peoplesoft_enterprise_peopletools PeopleSoft Enterprise PT PeopleTools

CVE-2020-26184

Matching Score-8

Assigner-Dell

Product-bsafe_micro-edition-suite http_server security_service weblogic_server_proxy_plug-in Dell BSAFE Micro Edition Suite

Matching Score-8

Assigner-Dell

CVSS Score-7.5||HIGH

EPSS-0.37% / 58.78%

7 Day CHG+0.06%

Published-01 Jun, 2022 | 14:25

Updated-16 Sep, 2024 | 17:33

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.

Vendor-Oracle Corporation Dell Inc.

CWE ID-CWE-295

Improper Certificate Validation

CVE-2020-2592

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 16:29

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle AutoVue accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-autovue AutoVue 3D Professional Advanced

CVE-2016-5455

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.43% / 62.89%

7 Day CHG~0.00%

Published-21 Jul, 2016 | 10:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.

Product-communications_messaging_server n/a

CVE-2020-2695

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.18% / 78.93%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:52

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-peoplesoft_enterprise_cost_center_common_application_objects PeopleSoft Enterprise CC Common Application Objects

CVE-2009-2000

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-1.04% / 77.69%

7 Day CHG~0.00%

Published-22 Oct, 2009 | 18:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.

Product-database_server n/a

CVE-2020-24584

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-3.29% / 87.34%

7 Day CHG~0.00%

Published-01 Sep, 2020 | 12:36

Updated-04 Aug, 2024 | 15:19

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077.

Vendor-n/a Canonical Ltd.Django Oracle Corporation Fedora Project

Product-ubuntu_linux django zfs_storage_appliance_kit fedora n/a

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2020-2559

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.29% / 79.83%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 16:37

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 19.7 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-siebel_ui_framework Siebel UI Framework

CVE-2009-1997

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5||MEDIUM

EPSS-1.04% / 77.69%

7 Day CHG~0.00%

Published-22 Oct, 2009 | 18:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.

Product-database_server n/a

CVE-2016-5524

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.19% / 40.08%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.

Product-agile_product_lifecycle_management n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-2564

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-1.37% / 80.43%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 16:36

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 19.10 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-siebel_ui_framework Siebel UI Framework

CVE-2008-7239

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-2.48% / 85.46%

7 Day CHG~0.00%

Published-14 Sep, 2009 | 14:00

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04).

Product-e-business_suite_11i n/a

CVE-2018-3210

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.57% / 68.88%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 01:00

Updated-02 Oct, 2024 | 19:35

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-glassfish_server GlassFish Server

CVE-2018-3254

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.85% / 75.06%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 01:00

Updated-02 Oct, 2024 | 19:30

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Product-webcenter_portal WebCenter Portal

CVE-2018-2765

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-1.34% / 80.24%

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:21

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).