Unauthenticated/Unauthorized Access - 15320 CVEs (Page 104/128)

About “Unauthenticated/Unauthorized Access”

A curated feed of “Unauthenticated/Unauthorized Access”-related CVEs appears below. We currently track 15320 CVEs for this tag (all time). In the last 365 days, 3827 were published. Average CVSS is 7.4 (all time; 7.4 over 365d), and 61% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-862 - Missing Authorization, CWE-306 - Missing Authentication for Critical Function, CWE-639 - Authorization Bypass Through User-Controlled Key.

In our taxonomy this topic maps to a HIGH impact class. Vendor advisories and release notes are key. Verify compatibility matrices, prefer supported long term versions, and stage rollouts with monitoring. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2019-02-27

High

CVE-2019-5491

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user.

CVSS: 7.5 CWE: N/A View on NVD

2019-02-25

High

CVE-2018-13913

Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…

CVSS: 7.8 CWE: CWE-129 - Improper Validation of Array Index View on NVD

Critical

CVE-2018-13904

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consu…

CVSS: 9.8 CWE: CWE-20 - Improper Input Validation View on NVD

2019-02-20

High

CVE-2019-3924

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients.…

CVSS: 7.5 CWE: CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy') View on NVD

2019-02-18

High

CVE-2019-0102

Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network…

CVSS: 8.8 CWE: CWE-384 - Session Fixation View on NVD

Critical

CVE-2019-0101

Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel Unite(R) Solution administra…

CVSS: 9.8 CWE: N/A View on NVD

2019-02-15

Critical

CVE-2019-4059

IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database.…

CVSS: 9.8 CWE: CWE-522 - Insufficiently Protected Credentials View on NVD

High

CVE-2019-0266

Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though thi…

CVSS: 7.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

2019-02-12

Critical

CVE-2018-19645

An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2019-1688

A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) c…

CVSS: 7.1 CWE: CWE-798 - Use of Hard-coded Credentials View on NVD

Critical

CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166…

CVSS: 9.1 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

2019-02-11

High

CVE-2018-9587

In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unauthorized access to files within the cont…

CVSS: 7.3 CWE: CWE-552 - Files or Directories Accessible to External Parties View on NVD

Medium

CVE-2018-17542

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter…

CVSS: 4.3 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

Critical

CVE-2019-7736

D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101.

CVSS: 9.8 CWE: CWE-425 - Direct Request ('Forced Browsing') View on NVD

High

CVE-2018-11888

Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron…

CVSS: 7.8 CWE: CWE-862 - Missing Authorization View on NVD

2019-02-07

Medium

CVE-2019-1660

A vulnerability in the Simple Object Access Protocol (SOAP) of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to gain unauthorized access to an aff…

CVSS: 5.3 CWE: CWE-284 - Improper Access Control View on NVD

2019-02-06

Medium

CVE-2019-6517

BD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S. and Malaysian Releases, between November 2017 and November 2018 and BD FACSLyric IVD Windows 10 Professional Operating S…

CVSS: 6.8 CWE: CWE-284 - Improper Access Control View on NVD

Medium

CVE-2015-9282

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an atta…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2019-02-05

High

CVE-2019-6521

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information.

CVSS: 8.6 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2019-6519

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2018-4056

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injec…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

Medium

CVE-2018-19000

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.

CVSS: 5.3 CWE: CWE-288 - Authentication Bypass Using an Alternate Path or Channel View on NVD

Critical

CVE-2018-18998

LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.

CVSS: 9.8 CWE: CWE-798 - Use of Hard-coded Credentials View on NVD

Critical

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attacker…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

High

CVE-2019-7390

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all cl…

CVSS: 8.6 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

High

CVE-2019-7389

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication vi…

CVSS: 7.5 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

High

CVE-2019-7388

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address…

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2019-02-04

Critical

CVE-2019-1000001

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. T…

CVSS: 9.8 CWE: CWE-522 - Insufficiently Protected Credentials View on NVD

2019-02-01

High

CVE-2018-16479

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

CVSS: 7.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

Medium

CVE-2018-15617

A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include…

CVSS: 6.5 CWE: CWE-399 View on NVD

2019-01-31

Medium

CVE-2018-18940

servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could poten…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2019-01-30

Medium

CVE-2019-1566

The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Critical

CVE-2018-17431

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

2019-01-28

Critical

CVE-2019-6991

A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a lon…

CVSS: 9.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

2019-01-24

High

CVE-2018-18981

In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that coul…

CVSS: 7.5 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2018-5497

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user.

CVSS: 4.4 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2019-1657

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could expl…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2019-1647

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability…

CVSS: 8.0 CWE: CWE-284 - Improper Access Control View on NVD

2019-01-22

High

CVE-2018-6445

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password…

CVSS: 7.5 CWE: N/A View on NVD

Critical

CVE-2018-6444

A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrar…

CVSS: 9.8 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

High

CVE-2018-6443

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocu…

CVSS: 8.1 CWE: CWE-255 View on NVD

2019-01-18

Critical

CVE-2019-3910

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrato…

CVSS: 9.1 CWE: N/A View on NVD

2019-01-16

High

CVE-2018-15782

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator wit…

CVSS: 7.7 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

Medium

CVE-2019-2556

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vuln…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2555

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2554

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2550

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitab…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2019-2549

CVSS: 6.1 CWE: N/A View on NVD

Medium

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4,…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2019-2545

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allow…

CVSS: 4.0 CWE: N/A View on NVD

Medium

CVE-2019-2544

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows…

CVSS: 4.0 CWE: N/A View on NVD

Medium

CVE-2019-2543

CVSS: 5.3 CWE: N/A View on NVD

High

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supported version that is affected is 10. Difficult to exploit vulnerability allows…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2540

Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.12. Easily expl…

CVSS: 6.1 CWE: N/A View on NVD

High

CVE-2019-2534

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easi…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2019-2525

CVSS: 5.6 CWE: N/A View on NVD

Medium

CVE-2019-2519

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily ex…

CVSS: 6.1 CWE: N/A View on NVD

Medium

CVE-2019-2512

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8…

CVSS: 4.7 CWE: N/A View on NVD

High

CVE-2019-2511

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and pri…

CVSS: 6.4 CWE: N/A View on NVD

Medium

CVE-2019-2499

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55, 8.56 and 8.57.…

CVSS: 6.1 CWE: N/A View on NVD

High

CVE-2019-2498

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4…

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2019-2497

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12…

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2019-2496

CVSS: 4.7 CWE: N/A View on NVD

Low

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). Supported versions that are affected are 9.0 and 9.2. Difficult to e…

CVSS: 3.1 CWE: N/A View on NVD

Medium

CVE-2019-2492

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5,…

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2019-2491

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2019-2490

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily ex…

CVSS: 4.7 CWE: N/A View on NVD

Critical

CVE-2019-2489

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.…

CVSS: 9.1 CWE: N/A View on NVD

Medium

CVE-2019-2488

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5,…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2485

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4,…

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2019-2480

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitabl…

CVSS: 5.3 CWE: N/A View on NVD

High

CVE-2019-2479

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2478

CVSS: 5.3 CWE: N/A View on NVD

High

CVE-2019-2477

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2476

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2475

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2474

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2473

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2472

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2471

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable…

CVSS: 6.1 CWE: N/A View on NVD

High

CVE-2019-2470

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Detail). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12…

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2019-2469

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2019-2468

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2467

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2466

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2465

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2464

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2463

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2019-2462

CVSS: 7.2 CWE: N/A View on NVD

Medium

CVE-2019-2461

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2460

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnera…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2459

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2458

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2457

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2456

CVSS: 6.5 CWE: N/A View on NVD

Critical

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Management Plan). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3…

CVSS: 9.1 CWE: N/A View on NVD

Medium

CVE-2019-2451

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2450

CVSS: 6.5 CWE: N/A View on NVD

Low

CVE-2019-2449

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticate…

CVSS: 3.1 CWE: N/A View on NVD

Medium

CVE-2019-2448

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2019-2447

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2019-2446

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2019-2445

Vulnerability in the Oracle Content Manager component of Oracle E-Business Suite (subcomponent: Cover Letter). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5,…

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2019-2442

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploit…

CVSS: 6.1 CWE: N/A View on NVD

Medium

CVE-2019-2441

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitabl…

CVSS: 5.3 CWE: N/A View on NVD

High

CVE-2019-2440

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.…

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2019-2439

CVSS: 6.1 CWE: N/A View on NVD

Medium

CVE-2019-2438

Vulnerability in the Oracle Web Cache component of Oracle Fusion Middleware (subcomponent: ESI/Partial Page Caching). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulner…

CVSS: 6.9 CWE: N/A View on NVD

High

CVE-2019-2437

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows unauth…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2019-2435

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vul…

CVSS: 8.1 CWE: N/A View on NVD

Medium

CVE-2019-2431

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerabi…

CVSS: 6.1 CWE: N/A View on NVD

Medium

CVE-2019-2430

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerabili…

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2019-2429

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2019-2427

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Ea…

CVSS: 5.3 CWE: N/A View on NVD

Low

CVE-2019-2426

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to e…

CVSS: 3.7 CWE: N/A View on NVD

Medium

CVE-2019-2425

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability a…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2423

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploit…

CVSS: 6.1 CWE: N/A View on NVD

Low

CVE-2019-2422

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to ex…

CVSS: 3.1 CWE: N/A View on NVD

Medium

CVE-2019-2421

Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products (subcomponent: Guided Self Service). The supported version that is affected is 9.2. Eas…

CVSS: 6.1 CWE: N/A View on NVD