Adobe Acrobat and Reader versions 2019.021.20061 and earlier 2017.011.30156 and earlier 2017.011.30156 and earlier and 2015.006.30508 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function.


Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.


Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR V12 V10 and V11 parameter in the Formsetqosband function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.


Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function.


Adobe Acrobat and Reader versions 2018.011.20063 and earlier 2017.011.30102 and earlier and 2015.006.30452 and earlier have a stack overflow vulnerability. Successful exploitation could lead to information disclosure.


An issue was discovered on Samsung mobile devices with N(7.1) O(8.x) and P(9.0) (Exynos chipsets) software. There is a stack overflow in the kernel driver. The Samsung ID is SVE-2019-15034 (November 2019).


An issue was discovered on Samsung mobile devices with N(7.x) O(8.x) and P(9.0) (Exynos chipsets) software. There is a baseband stack overflow. The Samsung ID is SVE-2018-13188 (February 2019).


An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c possibly related to bit_read_TF.


An issue was discovered on Samsung mobile devices with N(7.x) O(8.x) and P(9.0) (Exynos chipsets) software. A stack overflow in the HDCP Trustlet causes arbitrary code execution. The Samsung ID is SVE-2019-14665 (August 2019).


An

issue

was

discovered

on

Samsung

mobile

devices

with

(Exynos

chipsets)

software.

The

Wi-Fi

kernel

drivers

have

a

stack

overflow.

The

Samsung

IDs

are

(November


An issue was discovered on Samsung mobile devices with N(7.x) O(8.x) Go(8.1) P(9.0) and Go(9.0) (Exynos chipsets) software. A baseband stack overflow leads to arbitrary code execution. The Samsung ID is SVE-2019-13963 (April 2019).


In SWFTools a stack overflow was found in pdf2swf.


Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.


Possible

Stack

overflow

can

occur

when

processing

a

large

SDP

body

or

non

standard

SDP

body

without

right

delimiters

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Nicobar

Rennell


UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Wired Infrastructure and Networking in MDM9205 MDM9650 QCS605 SA6155P SC8180X SDA845 SDM670 SDM710 SDM845 SDM850 SDX55 SM6150 SM7150 SM8150 SM8250 SXR1130 SXR2130


Stack

overflow

can

occur

when

SDP

is

received

with

multiple

payload

types

in

the

FMTP

attribute

of

a

video

M

line

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Nicobar

Rennell


Copying

RTCP

messages

into

the

output

buffer

without

checking

the

destination

buffer

size

which

could

lead

to

a

remote

stack

overflow.

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Rennell


Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables in MSM8909W QCS405 QCS605 Qualcomm 215 SD 210/SD 212/SD 205 SD 425 SD 439 / SD 429 SD 450 SD 625 SD 632 SD 665 SD 675 SD 712 / SD 710 / SD 670 SD 730 SD 845 / SD 850 SD 855 SDM439 SDX24


Copying

RTCP

messages

into

the

output

buffer

without

checking

the

destination

buffer

size

which

could

lead

to

a

remote

stack

overflow

when

processing

large

data

or

non-standard

feedback

messages

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Kamorta

Nicobar

Rennell


TensorFlow

is

an

end-to-end

open

source

platform

for

machine

learning.

The

implementation

of

can

be

tricked

into

stack

overflow

due

to

recursion

by

giving

in

a

specially

crafted

input.

The

fix

will

be

included

in

TensorFlow

We

will

also

cherrypick

this

commit

on

TensorFlow

TensorFlow

TensorFlow

and

TensorFlow

as

these

are

also

affected

and

still

in

supported

range.


TensorFlow

is

an

end-to-end

open

source

platform

for

machine

learning.

TFlite

graphs

must

not

have

loops

between

nodes.

However

this

condition

was

not

checked

and

an

attacker

could

craft

models

that

would

result

in

infinite

loop

during

evaluation.

In

certain

cases

the

infinite

loop

would

be

replaced

by

stack

overflow

due

to

too

many

recursive

calls.

For

example

the

`While`

could

be

tricked

into

a

scneario

where

both

the

body

and

the

loop

subgraphs

are

the

same.

Evaluating

one

of

the

subgraphs

means

calling

the

`Eval`

function

for

the

other

and

this

quickly

exhaust

all

stack

space.

The

fix

will

be

included

in

TensorFlow

We

will

also

cherrypick

this

commit

on

TensorFlow

TensorFlow

TensorFlow

and

TensorFlow

as

these

are

also

affected

and

still

in

supported

range.

Please

consult

our

security

for

more

information

regarding

the

security

model

and

how

to

contact

us

with

issues

and

questions.


An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server.


A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file which would cause hivex to recursively call the _get_children() function leading to a stack overflow. The highest threat from this vulnerability is to system availability.


Adobe Photoshop versions 21.2.9 (and earlier) and 22.4.2 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted PSD file in Photoshop.


Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.


A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application attack vector can be local or remote and can lead to code execution and/or system crash.


A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7 macOS Big Sur 11.5 watchOS 7.6 tvOS 14.7 Security Update 2021-005 Mojave Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.


Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon IoT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking


A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.


Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted file potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in After Effects.


Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However a `GraphDef` containing a fragment such as the following can be consumed when loading a `SavedModel`. This would result in a stack overflow during execution as resolving each `NodeDef` means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1 TensorFlow 2.6.3 and TensorFlow 2.5.3 as these are also affected and still in supported range.


A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack resulting in stack corruption.


An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.


An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.


In PoDoFo 0.9.5 there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.


In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser the stack overflow might possibly corrupt the stack.


stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard which allows an attacker to bypass the protection of -fstack-protector -fstack-protector-all -fstack-protector-strong and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.


Lack

of

check

to

prevent

the

buffer

length

taking

negative

values

can

lead

to

stack

overflow.

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

Snapdragon

Wired

Infrastructure

and

Networking

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only) and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0 G.0 and J.3 have a vulnerability that exposes an \echo\ service in which an attacker-sent buffer to an attacker-chosen device address within the same subnet is copied to the stack with no boundary checks hence resulting in stack overflow.


EOSIO/eos

eos

version

after

commit

contains

a

stack

overflow

vulnerability

in

that

can

result

in

attack

eos

network

node.

This

attack

appear

to

be

exploitable

via

network

request.

This

vulnerability

appears

to

have

been

fixed

in

after

commit


An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote Unauthenticated Stack Overflow in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets.


On Samsung mobile devices with N(7.x) software and Exynos chipsets attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution in conjunction with a brute-force attack to discover unlock information (PIN password or pattern). The Samsung ID is SVE-2017-10733.


Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable nor the Apache HTTP Server team could create one though some particular compiler and/or compilation option might make it possible with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow


Adobe Animate version 20.5 (and earlier) is affected by a stack overflow vulnerability which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate.


A vulnerability in the JPEG image parsing module in DaView Indy DaVa+ DaOffice softwares could allow an unauthenticated remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.


In

Tensorflow

before

versions

and

the

`Shard`

API

in

TensorFlow

expects

the

last

argument

to

be

a

function

taking

two

(i.e.

`long

long`)

arguments.

However

there

are

several

places

in

TensorFlow

where

a

lambda

taking

`int`

or

arguments

is

being

used.

In

these

cases

if

the

amount

of

work

to

be

parallelized

is

large

enough

integer

truncation

occurs.

Depending

on

how

the

two

arguments

of

the

lambda

are

used

this

can

result

in

segfaults

read/write

outside

of

heap

allocated

arrays

stack

overflows

or

data

corruption.

The

issue

is

patched

in

commits

and

and

is

released

in

TensorFlow

versions

or


A stack overflow in WhatsApp for Android prior to v2.20.196.16 WhatsApp Business for Android prior to v2.20.196.12 WhatsApp for iOS prior to v2.20.90 WhatsApp Business for iOS prior to v2.20.90 and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.


An issue was discovered on Samsung mobile devices with O(8.x) P(9.0) and Q(10.0) software. There is a stack overflow in display driver. The Samsung ID is SVE-2019-15877 (January 2020).


An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 (February 2020).


An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. There is a stack overflow in the kperfmon driver. The Samsung ID is SVE-2019-15876 (January 2020).


Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability which allows attackers to crash the system or escalate user privilege.


Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a stack overflow vulnerabilities. An attacker tricks a user into installing a malicious application on the smart phone and send given parameter to touchscreen drive to crash the system or escalate privilege.


Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.

static code injection
arbitrary code execution
code injection


Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in the do parameter.


Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier when comments are enabled allows remote attackers to inject arbitrary PHP code via an editcomments action.


Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel possibly 2.0.3 allows remote attackers to inject arbitrary PHP code via the filecontents parameter which can be executed by accessing includes/news.php.


Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters as demonstrated via the threadperpage parameter in an editconfig action.


Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.


Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.


Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field which results in code execution through a direct request to gb.php.


Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter which can be executed via a request to posts.php.


Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp which is stored in inc_skin_file.asp.


Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings which are stored in set_inc.php.


Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message which is written to a PHP file.


Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field which is inserted into content-data.php.


Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers which are stored in Data/flood.db.php.


Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.


Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php.


Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) VBook (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file which is included other VBook scripts.


Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file which is included other N.T. scripts.


Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php which is executed by all.php and (2) the banned parameter in admin_index.php.


Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header which is stored in config.php.


Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.


Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter which is injected into include/variable.php.


Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter which is injected into chat/text.php.


Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary PHP code HTML and script via the csscontent parameter which is directly inserted into the gbxfinal.css file.


The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it which makes it easier for remote attackers to conduct web-based attacks and steal cookies.


IBM QRadar SIEM 7.3 7.4 and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037.


A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in the header of out/out.Viewfolder.php.


A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies deface web applications etc.


A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (aka SITE_NAME) a related issue to CVE-2011-4709.1.


A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.


A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events then the payload will be executed.


A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field.


A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter.


A Stored XSS vulnerability has been discovered in the v5.5.0 version of the Coaster CMS product.


A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.


A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data the script stored is executed for all the users visiting the website.


A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes.


A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.


A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.


SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control which allows remote attackers to download arbitrary .inc files via a direct request as demonstrated by admin/includes/dbtables.inc.


eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm.


phpRPG 0.8 stores sensitive information under the web root with insufficient access control which allows remote attackers to read session ID values in files under tmp/ and then hijack sessions via PHPSESSID cookies.


RMForum stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for rmforum.mdb.


PortalApp stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for 8691.mdb a different vector than CVE-2004-1786.


HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb.


EMembersPro 1.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for users.mdb.


MitiSoft stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for access_MS/MitiSoft.mdb.


Openforum stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb.


lblog stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/.


Webulas stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for db/db.mdb.


CarbonCommunities stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb.


AspBB stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb.


Siteman 1.1.11 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt.


WineGlass stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb.


rblog stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for (1) data/admin.mdb or (2) data/rblog.mdb.


OhhASP stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb.


jgbbs stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb.


newsCMSlite stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.


BattleBlog stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.


AJLogin 3.5 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database containing passwords via a direct request for ajlogin.mdb.


StatCounteX 3.1 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for path/stats.mdb.


ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.


fipsForum 2.6 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.


Kipper 2.01 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a file containing credentials via a direct request for job/config.data.


PDshopPro stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for (1) /pdshoppro.mdb (2) /data/pdshoppro.mdb or (3) /shoppro/data/pdshoppro.mdb.


registroTL stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for /usuarios.dat.


SendLink 1.5 stores sensitive information possibly including passwords in plaintext in the data.eat file which allows local users to gain privileges.


eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key which allows local users to gain privileges via the proxy_user and proxy_password values.


Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry which allows local users to gain privileges.


PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files which allows local users to gain privileges.


ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file which allows local users to obtain sensitive information such as proxy server information and passwords.


Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.


Natterchat 1.12 stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file via a direct request for natterchat112.mdb.


PacPoll 4.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for (1) poll.mdb or (2) poll97.mdb.


ASPPortal stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file via a direct request for xportal.mdb.


Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb.


ASPTicker 1.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file via a direct request for news.mdb.


WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt.


PostEcards stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file via a direct request for postcards.mdb.


mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.

stores sensitive information
insufficient access control


ForumApp 3.3 stores sensitive information under the web root with insufficient access control which allows remote attackers to download a database via a direct request for (1) data/8690.mdb or (2) data/8690BAK.mdb.


JBook stores sensitive information under the web root with insufficient access control which allows remote attackers to download the database file via a direct request to userids.mdb.


PHPBoost 3.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/.


A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths aka 'Git for Visual Studio Tampering Vulnerability'.


A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails aka \Microsoft Office Tampering Vulnerability.\ This affects Microsoft Word Microsoft Office.


A tampering vulnerability exists when .NET Core improperly handles specially crafted files aka \.NET Core Tampering Vulnerability.\ This affects .NET Core 2.1.


A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data aka \Microsoft Exchange Server Tampering Vulnerability.\ This affects Microsoft Exchange Server.


A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers aka 'Microsoft IIS Server Tampering Vulnerability'.


A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1440.


A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1523.


In freewvs before 0.1.1 a user could create a large file that freewvs will try to read which will terminate a scan process. This has been patched in 0.1.1.


In Zammad before 3.3.1 a Customer has ticket access that should only be available to an Agent (e.g. read internal data split or merge).


Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords.


Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic.


Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.

transmission of sensitive information
man in the middle


Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.


Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.


Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.


Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.


Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215 BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.


Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action.


Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files or Cells files belonging to any user via the format parameter.


Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations.


Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.


Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items parameter in a move operation.


Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Adobe Acrobat and Reader versions 2018.011.20063 and earlier 2017.011.30102 and earlier and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.


A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3 macOS Mojave 10.14.3 tvOS 12.1.2 watchOS 5.1.3. A malicious application may be able to break out of its sandbox.


A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3 macOS Mojave 10.14.5 tvOS 12.3 watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.


A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7 Safari 14.1.2 macOS Big Sur 11.5 watchOS 7.6 tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.


A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.


A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1 tvOS 11.4.1 watchOS 4.3.2 Safari 11.1.2 iTunes 12.8 for Windows iCloud for Windows 7.6.


A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.


A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.


A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5 macOS Monterey 12.3 Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.


A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8 tvOS 15 iOS 15 and iPadOS 15 Safari 15 watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.


A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8 tvOS 15 watchOS 8 iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.


A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2 macOS Monterey 12.1 Safari 15.2 iOS 15.2 and iPadOS 15.2 watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.


In SilverStripe through 4.3.3 a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.


Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Client

programs).

Supported

versions

that

are

affected

are

and

prior

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

MySQL

Server

executes

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

DGS

RES

Online

FMS

Sender

FMS

Receiver

OHC

WPF

Security).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

executes

to

compromise

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Kernel).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Solaris

executes

to

compromise

Oracle

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Solaris

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

While

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

While

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Server:

Packaging).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

MySQL

Server

executes

to

compromise

MySQL

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

MySQL

Server

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

While

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

PeopleSoft

Enterprise

PeopleTools

executes

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

PeopleSoft

Enterprise

PeopleTools.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

While

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

The

supported

version

that

is

affected

is

Prior

to

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Solaris accessible data. CVSS v3.0 Base Score 3.3 (Integrity impacts).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

JCE).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

SE

Java

SE

Embedded

JRockit

executes

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

JRockit

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded

JRockit.

Note:

Applies

to

client

and

server

deployment

of

Java.

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

SuperCluster

Specific

Software

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Backup/Restore

Utility).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

SuperCluster

Specific

Software

executes

to

compromise

Oracle

SuperCluster

Specific

Software.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

SuperCluster

Specific

Software.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

executes

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

Property

Interfaces

component

of

Oracle

Hospitality

Applications

(subcomponent:

Parser).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Hospitality

Property

Interfaces

executes

to

compromise

Hospitality

Property

Interfaces.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Hospitality

Property

Interfaces

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

PMS).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

executes

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Application

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

PeopleSoft

Enterprise

PT

PeopleTools

executes

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Support

Tools).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

WebCenter

Sites

executes

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Sites

accessible

data.

Note:

Please

refer

to

Doc

ID

<a

Oracle

Support

Note

for

instructions

on

how

to

address

this

issue.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Kernel).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Solaris

executes

to

compromise

Solaris.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Solaris

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

Security).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

SE

Java

SE

Embedded

JRockit

executes

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

Java

SE

Embedded

JRockit

accessible

data.

Note:

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Hospitality

executes

to

compromise

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Materials

Management

component

of

Oracle

Hospitality

Applications

(subcomponent:

MMS).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Materials

Management

executes

to

compromise

Oracle

Hospitality

Cruise

Materials

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Materials

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Cruise

Materials

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Hospitality

Cruise

Fleet

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

Fleet

Management

System

Suite).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Fleet

Management

System

executes

to

compromise

Oracle

Hospitality

Cruise

Fleet

Management

System.

While

the

vulnerability

is

in

Oracle

Hospitality

Cruise

Fleet

Management

System

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Cruise

Fleet

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Hospitality

Cruise

Fleet

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

Fleet

Management

System

Suite).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Fleet

Management

System

executes

to

compromise

Oracle

Hospitality

Cruise

Fleet

Management

System.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Cruise

Fleet

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

SPMS

Suite).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

executes

to

compromise

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

SPMS

Suite).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

executes

to

compromise

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System.

While

the

vulnerability

is

in

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

Supported

versions

that

are

affected

are

Prior

to

and

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Replication).

Supported

versions

that

are

affected

are

and

prior

and

prior

and

and

prior.

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

MySQL

Server

executes

to

compromise

MySQL

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

MySQL

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

MySQL

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

ME

SDK

component

of

Oracle

Java

Micro

Edition

(subcomponent:

Installer).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

ME

SDK

executes

to

compromise

Java

ME

SDK.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

ME

SDK.

Note:

This

applies

to

the

Windows

platform

only.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Java

SE

JRockit

component

of

Oracle

Java

SE

(subcomponent:

Security).

Supported

versions

that

are

affected

are

Java

SE:

and

JRockit:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

SE

JRockit

executes

to

compromise

Java

SE

JRockit.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

JRockit

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

JRockit.

Note:

Applies

to

client

and

server

deployment

of

Java.

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

OPERA

Property

Services

component

of

Oracle

Hospitality

Applications

(subcomponent:

Integration).

The

supported

version

that

is

affected

is

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

OPERA

Property

Services

executes

to

compromise

Oracle

Hospitality

OPERA

Property

Services.

While

the

vulnerability

is

in

Oracle

Hospitality

OPERA

Property

Services

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Hospitality

OPERA

Property

Services.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Install).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

SE

executes

to

compromise

Java

SE.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE.

Note:

Applies

to

installation

process

on

client

deployment

of

Java.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Configuration

Manager).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

PeopleSoft

Enterprise

PeopleTools

executes

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Hospitality

Guest

Access

component

of

Oracle

Hospitality

Applications

(subcomponent:

Base).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Hospitality

Guest

Access

executes

to

compromise

Oracle

Hospitality

Guest

Access.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Guest

Access

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PsAdmin).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

PeopleSoft

Enterprise

PT

PeopleTools

executes

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

The

supported

version

that

is

affected

is

Prior

to

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

VM

Server

for

SPARC

product

of

Oracle

Systems

(component:

Templates).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

Server

for

SPARC

executes

to

compromise

Oracle

VM

Server

for

SPARC.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

VM

Server

for

SPARC

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Solaris

Cluster

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

NAS

device

addition).

The

supported

version

that

is

affected

is

Easily

\exploitable\

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Solaris

Cluster

executes

to

compromise

Solaris

Cluster.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Solaris

Cluster

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Security).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Java

SE

executes

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Data

Store

component

of

Oracle

Berkeley

DB.

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Data

Store

executes

to

compromise

Data

Store.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Data

Store.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

component

of

Oracle

E-Business

Suite

(subcomponent:

Print

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

Common

Applications

component

of

Oracle

E-Business

Suite

(subcomponent:

CRM

User

Management

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Common

Applications.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Common

Applications

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Common

Applications

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Common

Applications

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Core

RDBMS

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

Oracle

Net

to

compromise

Core

RDBMS.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Core

RDBMS

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Kernel).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

NFS

to

compromise

Oracle

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Solaris

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Oracle

Hospitality

Gift

and

Loyalty

component

of

Oracle

Food

and

Beverage

Applications.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Gift

and

Loyalty.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Gift

and

Loyalty

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Gift

and

Loyalty

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Networking).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Fluid

Homepage

Navigation).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Knowledge

component

of

Oracle

Siebel

CRM

(subcomponent:

Web

Applications

(InfoCenter)).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Knowledge

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Knowledge

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Knowledge

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Email

Center

component

of

Oracle

E-Business

Suite

(subcomponent:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Oracle

Outside

In

Technology

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Libraries).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Oracle

Marketing

component

of

Oracle

E-Business

Suite

(subcomponent:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Marketing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Marketing

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Marketing

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Marketing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Server:

Security:

Encryption).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Web

Services).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Partner

Management

component

of

Oracle

E-Business

Suite

(subcomponent:

Partner

Dash

board).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Partner

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Partner

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Partner

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Partner

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Reports

Developer

component

of

Oracle

Fusion

Middleware

(subcomponent:

Valid

Session).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Reports

Developer.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Reports

Developer

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Reports

Developer

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Reports

Developer

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Forms

product

of

Oracle

Fusion

Middleware

(component:

Services).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Forms.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Forms

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Forms

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Forms

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server

Pluggable

Auth).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Web

Services).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

component

of

Oracle

E-Business

Suite

(subcomponent:

Print

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

BI

Publisher

(formerly

XML

Publisher)

component

of

Oracle

Fusion

Middleware

(subcomponent:

BI

Publisher

Security).

The

supported

version

that

is

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

BI

Publisher

(formerly

XML

Publisher).

While

the

vulnerability

is

in

BI

Publisher

(formerly

XML

Publisher)

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

BI

Publisher

(formerly

XML

Publisher)

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

BI

Publisher

(formerly

XML

Publisher)

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Applications

Manager

component

of

Oracle

E-Business

Suite

(subcomponent:

SQL

Extensions).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Manager.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Manager

accessible

data.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H).