Page 4 of 51 results (0.003 seconds)

CVSS: 7.5EPSS: 2%CPEs: 27EXPL: 0

CVE-2019-12399 – kafka: Connect REST API exposes plaintext secrets in tasks endpoint

https://notcve.org/view.php?id=CVE-2019-12399

14 Jan 2020 — When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value, then any client can issue a request to the same Connect cluster to obtain the connector's task configuration and the response will contain the plaintext secret rather than the externalized secrets variables. Cuando l... • http://www.openwall.com/lists/oss-security/2020/01/14/1 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-319: Cleartext Transmission of Sensitive Information •

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-2839

https://notcve.org/view.php?id=CVE-2019-2839

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking acc... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 5.7EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-2840

https://notcve.org/view.php?id=CVE-2019-2840

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in una... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-2790

https://notcve.org/view.php?id=CVE-2019-2790

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banki... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-2793

https://notcve.org/view.php?id=CVE-2019-2793

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in una... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-2794

https://notcve.org/view.php?id=CVE-2019-2794

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible d... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 8.1EPSS: 1%CPEs: 3EXPL: 0

CVE-2019-2754

https://notcve.org/view.php?id=CVE-2019-2754

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle F... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-2744

https://notcve.org/view.php?id=CVE-2019-2744

23 Jul 2019 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universa... • http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html •

CVSS: 6.1EPSS: 1%CPEs: 11EXPL: 0

CVE-2018-2899

https://notcve.org/view.php?id=CVE-2018-2899

18 Jul 2018 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the v... • http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html •

CVSS: 6.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2018-2974

https://notcve.org/view.php?id=CVE-2018-2974

18 Jul 2018 — Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access... • http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html •