Skip to main content
CVE-2020-14724 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Oracle Solaris
NVD
CVSS 3.1
7.3
EPSS
0.5%
CVE-2020-14561 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Information Disclosure Oracle Food And Beverage Applications
NVD
CVSS 3.1
7.3
EPSS
0.5%
CVE-2020-14543 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Oracle Hospitality Reporting And Analytics
NVD
CVSS 3.1
7.3
EPSS
0.5%
CVE-2020-14718 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Oracle Graalvm
NVD
CVSS 3.1
7.2
EPSS
1.5%
CVE-2020-14697 Jul 15, 18:15 HIGH This Week

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure MySQL Oracle Canonical Active Iq Unified Manager +5
NVD
CVSS 3.1
7.2
EPSS
2.0%
CVE-2020-14696 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Business Intelligence Publisher
NVD
CVSS 3.1
7.2
EPSS
1.2%
CVE-2020-14678 Jul 15, 18:15 HIGH This Week

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure MySQL Oracle Canonical Active Iq Unified Manager +5
NVD
CVSS 3.1
7.2
EPSS
2.0%
CVE-2020-14663 Jul 15, 18:15 HIGH This Week

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure MySQL Oracle Canonical Active Iq Unified Manager +5
NVD
CVSS 3.1
7.2
EPSS
2.1%
CVE-2020-14571 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oracle Bi Publisher
NVD
CVSS 3.1
7.2
EPSS
1.2%
CVE-2020-2984 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Configuration Manager
NVD
CVSS 3.1
7.1
EPSS
1.1%
CVE-2020-2983 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Data Masking And Subsetting
NVD
CVSS 3.1
7.1
EPSS
1.1%
CVE-2020-2982 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Enterprise Manager Base Platform
NVD
CVSS 3.1
7.1
EPSS
1.1%
CVE-2020-14709 Jul 15, 18:15 HIGH This Week

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Card). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Retail Customer Management And Segmentation Foundation
NVD
CVSS 3.1
7.1
EPSS
1.0%
CVE-2020-14691 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interface). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Financial Services Liquidity Risk Management
NVD
CVSS 3.1
7.1
EPSS
1.0%
CVE-2020-14602 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Financial Services Analytical Applications Infrastructure
NVD
CVSS 3.1
7.1
EPSS
1.0%
CVE-2020-14570 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oracle Bi Publisher
NVD
CVSS 3.1
7.1
EPSS
1.4%
CVE-2020-2981 Jul 15, 18:15 HIGH PATCH This Week

Vulnerability in the Data Store component of Oracle Berkeley DB. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

Information Disclosure Oracle Berkeley Db
NVD
CVSS 3.1
7.0
EPSS
0.4%
CVE-2020-14557 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.8
EPSS
1.3%
CVE-2020-14552 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Webcenter Portal
NVD
CVSS 3.1
6.8
EPSS
1.1%
CVE-2020-15780 Jul 15, 22:15 MEDIUM PATCH This Month

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

Authentication Bypass Linux Canonical Leap Linux Kernel +2
NVD
CVSS 3.1
6.7
EPSS
1.3%
CVE-2020-2969 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Data Pump component of Oracle Database Server. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

Information Disclosure Oracle Database Server
NVD
CVSS 3.1
6.6
EPSS
2.0%
CVE-2020-14065 Jul 15, 20:15 MEDIUM This Month

IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Icewarp Mail Server
NVD GitHub
CVSS 3.1
6.5
EPSS
1.5%
CVE-2020-14064 Jul 15, 20:15 MEDIUM This Month

IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Icewarp Mail Server
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2020-15117 Jul 15, 18:15 MEDIUM PATCH This Month

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Fedora Synergy Fedoraproject
NVD GitHub
CVSS 3.1
6.5
EPSS
2.5%
CVE-2020-14711 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Apple Oracle Leap Vm Virtualbox +1
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2020-14693 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Insurance Accounting Analyzer
NVD
CVSS 3.1
6.5
EPSS
1.0%
CVE-2020-14692 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Financial Services Loan Loss Forecasting And Provisioning
NVD
CVSS 3.1
6.5
EPSS
1.0%
CVE-2020-14685 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Financial Services Analytical Applications Infrastructure
NVD
CVSS 3.1
6.5
EPSS
1.0%
CVE-2020-14680 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service MySQL Oracle Canonical Active Iq Unified Manager +5
NVD
CVSS 3.1
6.5
EPSS
2.1%
CVE-2020-14655 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Oracle Security Service
NVD
CVSS 3.1
6.5
EPSS
1.1%
CVE-2020-14652 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.5
EPSS
1.1%
CVE-2020-14619 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service MySQL Oracle Canonical Active Iq Unified Manager +7
NVD
CVSS 3.1
6.5
EPSS
2.7%
CVE-2020-14605 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Financial Services Analytical Applications Infrastructure
NVD
CVSS 3.1
6.5
EPSS
1.0%
CVE-2020-14594 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Inventory Integration). Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Information Disclosure Oracle Food And Beverage Applications
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2020-14591 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service MySQL Oracle Active Iq Unified Manager Fedora +5
NVD
CVSS 3.1
6.5
EPSS
1.8%
CVE-2020-14576 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service MySQL Oracle Canonical Active Iq Unified Manager +7
NVD
CVSS 3.1
6.5
EPSS
2.2%
CVE-2020-14539 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service MySQL Oracle Canonical Active Iq Unified Manager +7
NVD
CVSS 3.1
6.5
EPSS
2.2%
CVE-2020-14721 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Enterprise Communications Broker
NVD
CVSS 3.1
6.3
EPSS
1.0%
CVE-2020-14662 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Financial Services Analytical Applications Infrastructure
NVD
CVSS 3.1
6.3
EPSS
0.9%
CVE-2020-15700 Jul 15, 16:15 MEDIUM This Month

An issue was discovered in Joomla!. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Joomla
NVD
CVSS 3.1
6.3
EPSS
0.6%
CVE-2020-15695 Jul 15, 16:15 MEDIUM This Month

An issue was discovered in Joomla!. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Joomla
NVD
CVSS 3.1
6.3
EPSS
0.6%
CVE-2020-15717 Jul 15, 19:15 MEDIUM PATCH This Month

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Rosariosis
NVD
CVSS 3.1
6.1
EPSS
1.5%
CVE-2020-2562 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Oracle Primavera Portfolio Management
NVD
CVSS 3.1
6.1
EPSS
1.0%
CVE-2020-14640 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.1
EPSS
1.2%
CVE-2020-14638 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.1
EPSS
1.2%
CVE-2020-14637 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.1
EPSS
1.2%
CVE-2020-14636 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Weblogic Server
NVD
CVSS 3.1
6.1
EPSS
1.2%
CVE-2020-14627 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Peoplesoft Enterprise Peopletools
NVD
CVSS 3.1
6.1
EPSS
1.0%
CVE-2020-14615 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Oracle Financial Services Analytical Applications Infrastructure
NVD
CVSS 3.1
6.1
EPSS
0.9%
CVE-2020-14613 Jul 15, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced User Interface). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Oracle Webcenter Sites
NVD
CVSS 3.1
6.1
EPSS
1.1%
Prev Page 3 of 6 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy