Unauthenticated/Unauthorized Access - 15326 CVEs (Page 96/128)

About “Unauthenticated/Unauthorized Access”

A curated feed of “Unauthenticated/Unauthorized Access”-related CVEs appears below. We currently track 15326 CVEs for this tag (all time). In the last 365 days, 3832 were published. Average CVSS is 7.4 (all time; 7.4 over 365d), and 61% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-862 - Missing Authorization, CWE-306 - Missing Authentication for Critical Function, CWE-639 - Authorization Bypass Through User-Controlled Key.

In our taxonomy this topic maps to a HIGH impact class. Vendor advisories and release notes are key. Verify compatibility matrices, prefer supported long term versions, and stage rollouts with monitoring. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2020-02-11

High

CVE-2013-5582

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that ext…

CVSS: 7.8 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2014-9753

confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2013-1359

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and Vi…

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2019-13941

A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names for project files that legitima…

CVSS: 7.5 CWE: CWE-552 - Files or Directories Accessible to External Parties View on NVD

Critical

CVE-2013-1360

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and Vi…

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevat…

CVSS: 7.8 CWE: CWE-287 - Improper Authentication View on NVD

2020-02-10

Critical

CVE-2019-17137

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not requ…

CVSS: 9.4 CWE: CWE-626 - Null Byte Interaction Error (Poison Null Byte) View on NVD

2020-02-07

Critical

CVE-2013-3091

An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging."

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2019-14002

APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indust…

CVSS: 7.8 CWE: CWE-276 - Incorrect Default Permissions View on NVD

Critical

CVE-2020-8656

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via th…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

2020-02-06

High

CVE-2020-5319

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP servic…

CVSS: 7.5 CWE: CWE-129 - Improper Validation of Array Index View on NVD

High

CVE-2020-5318

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The…

CVSS: 7.5 CWE: CWE-285 - Improper Authorization View on NVD

Critical

CVE-2020-8771

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of adminis…

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2020-7953

An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option.

CVSS: 7.5 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

Medium

CVE-2019-19800

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.

CVSS: 5.3 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

Medium

CVE-2019-12426

an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06

CVSS: 5.3 CWE: N/A View on NVD

2020-02-05

Critical

CVE-2013-2681

Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

2020-02-03

Critical

CVE-2020-8591

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2019-9502

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk.…

CVSS: 7.9 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2019-9501

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_…

CVSS: 7.9 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2013-2673

Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access.

CVSS: 6.8 CWE: CWE-863 - Incorrect Authorization View on NVD

High

CVE-2019-16893

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.

CVSS: 7.5 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

2020-02-01

Critical

CVE-2020-8515

DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter…

CVSS: 9.8 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

2020-01-31

High

CVE-2019-19550

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the…

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2020-01-29

Critical

CVE-2013-3317

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2013-3316

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg".

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, whic…

CVSS: 7.5 CWE: CWE-798 - Use of Hard-coded Credentials View on NVD

Critical

CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access t…

CVSS: 7.5 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2013-2567

An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sen…

CVSS: 7.5 CWE: CWE-798 - Use of Hard-coded Credentials View on NVD

2020-01-28

High

CVE-2013-1602

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.0…

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Critical

CVE-2013-3071

NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

Medium

CVE-2013-1600

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-2121 1.06_FR, 1.06, and 1.05_RU, DCS-21…

CVSS: 5.3 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2014-3445

backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging knowledge of the admini…

CVSS: 9.8 CWE: CWE-522 - Insufficiently Protected Credentials View on NVD

High

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the p…

CVSS: 7.5 CWE: CWE-307 - Improper Restriction of Excessive Authentication Attempts View on NVD

2020-01-27

High

CVE-2019-17095

A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the producti…

CVSS: 8.1 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

Critical

CVE-2013-4462

WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability

CVSS: 9.1 CWE: CWE-287 - Improper Authentication View on NVD

2020-01-26

Medium

CVE-2019-15278

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device.…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Medium

CVE-2019-15255

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access sensitive information re…

CVSS: 6.5 CWE: CWE-284 - Improper Access Control View on NVD

2020-01-25

Medium

CVE-2012-6494

Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2020-01-24

Medium

CVE-2013-1596

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.

CVSS: 5.3 CWE: CWE-287 - Improper Authentication View on NVD

High

CVE-2020-6964

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and…

CVSS: 8.6 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

Medium

CVE-2019-19632

An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Critical

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability

CVSS: 9.8 CWE: CWE-287 - Improper Authentication View on NVD

2020-01-23

Critical

CVE-2019-19897

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT…

CVSS: 9.8 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

High

CVE-2019-19893

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT…

CVSS: 7.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

Medium

CVE-2019-16516

An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated attacker to determine with cer…

CVSS: 5.3 CWE: CWE-203 - Observable Discrepancy View on NVD

2020-01-22

Medium

CVE-2020-5221

In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesys…

CVSS: 6.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

Critical

CVE-2020-6960

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

Critical

CVE-2020-6959

CVSS: 9.8 CWE: CWE-502 - Deserialization of Untrusted Data View on NVD

2020-01-21

High

CVE-2019-14767

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the serv…

CVSS: 7.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

2020-01-18

Medium

CVE-2020-7222

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result p…

CVSS: 5.3 CWE: CWE-287 - Improper Authentication View on NVD

2020-01-17

Medium

CVE-2019-14615

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via l…

CVSS: 5.5 CWE: N/A View on NVD

Critical

CVE-2019-17361

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoin…

CVSS: 9.8 CWE: CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection') View on NVD

2020-01-16

Medium

CVE-2019-3997

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.

CVSS: 4.6 CWE: CWE-287 - Improper Authentication View on NVD

Critical

CVE-2020-7048

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site…

CVSS: 9.1 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

High

CVE-2019-9503

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a re…

CVSS: 7.9 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2019-9500

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malic…

CVSS: 7.9 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2019-11997

A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via c…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Medium

CVE-2019-19278

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (All ve…

CVSS: 6.8 CWE: CWE-693 - Protection Mechanism Failure View on NVD

High

CVE-2019-13933

A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230…

CVSS: 8.6 CWE: CWE-306 - Missing Authentication for Critical Function View on NVD

2020-01-15

Critical

CVE-2009-1120

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where…

CVSS: 9.8 CWE: N/A View on NVD

High

CVE-2020-2728

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnera…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2020-2727

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily expl…

CVSS: 6.0 CWE: N/A View on NVD

High

CVE-2020-2723

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2020-2722

CVSS: 5.4 CWE: N/A View on NVD

Medium

CVE-2020-2721

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2020-2718

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Ea…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2020-2717

CVSS: 5.4 CWE: N/A View on NVD

Medium

CVE-2020-2716

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2020-2713

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerabil…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2020-2712

CVSS: 5.4 CWE: N/A View on NVD

Medium

CVE-2020-2711

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2709

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerability allows unauthenticated at…

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2020-2705

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2704

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2020-2699

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2020-2697

Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. Supported versions that are affected are 3.7 and 3.8. Easily exploitable vulnerability al…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2020-2695

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). Supported versions that are affected are 9.1 and 9.2. Easily exp…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2020-2693

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2020-2692

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2691

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2690

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2689

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2020-2688

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affe…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2020-2687

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerabili…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2020-2685

CVSS: 5.4 CWE: N/A View on NVD

Medium

CVE-2020-2684

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2681

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2677

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability a…

CVSS: 5.7 CWE: N/A View on NVD

Medium

CVE-2020-2676

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing). The supported version that is affected is 5.5. Easily exploitable vulnerability allow…

CVSS: 6.1 CWE: N/A View on NVD

High

CVE-2020-2675

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows l…

CVSS: 7.1 CWE: N/A View on NVD

High

CVE-2020-2673

Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2020-2672

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable…

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2671

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2670

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2669

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2020-2668

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability…

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2020-2667

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2020-2666

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitabl…

CVSS: 5.3 CWE: N/A View on NVD

High

CVE-2020-2665

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2020-2663

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulner…

CVSS: 6.1 CWE: N/A View on NVD

High

CVE-2020-2662

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2661

CVSS: 8.2 CWE: N/A View on NVD

Low

CVE-2020-2659

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult…

CVSS: 3.7 CWE: N/A View on NVD

High

CVE-2020-2658

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2020-2657

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable…

CVSS: 4.7 CWE: N/A View on NVD

Medium

CVE-2020-2655

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticate…

CVSS: 4.8 CWE: N/A View on NVD

Low

CVE-2020-2654

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability al…

CVSS: 3.7 CWE: N/A View on NVD

High

CVE-2020-2653

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2652

CVSS: 8.2 CWE: N/A View on NVD

High

CVE-2020-2651

CVSS: 8.2 CWE: N/A View on NVD

Medium

CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 16.0. Easil…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2020-2645

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0.…

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2644

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3…

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2643

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily ex…

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2642

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2641

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3…

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2640

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0…

CVSS: 6.0 CWE: N/A View on NVD

Medium

CVE-2020-2639

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easi…

CVSS: 6.0 CWE: N/A View on NVD