NotCVE - vendor:"Oracle" product:"Peopletools" version:"8.57"

Page 5 of 141 results (0.012 seconds)

CVSS: 5.9EPSS: 0%CPEs: 75EXPL: 1

CVE-2020-1971 – EDIPARTYNAME NULL pointer dereference

https://notcve.org/view.php?id=CVE-2020-1971

08 Dec 2020 — The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. • https://github.com/MBHudson/CVE-2020-1971 • CWE-476: NULL Pointer Dereference •

CVSS: 6.1EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-27193

https://notcve.org/view.php?id=CVE-2020-27193

12 Nov 2020 — A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs. Una vulnerabilidad de tipo cross-site scripting (XSS) en el plugin Color Dialog para CKEditor versión 4.15.0, permite a atacantes remotos ejecutar script web arbitrario después de persuadir a un usuario para que copie y pegue código HTML diseñado en una de las entradas del editor • https://ckeditor.com/blog/CKEditor-4.15.1-with-a-security-patch-released • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.3EPSS: 0%CPEs: 31EXPL: 0

CVE-2020-13956 – apache-httpclient: incorrect handling of malformed authority component in request URIs

https://notcve.org/view.php?id=CVE-2020-13956

28 Oct 2020 — Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. Apache HttpClient versiones anteriores a 4.5.13 y 5.0.3, pueden interpretar inapropiadamente el componente authority malformado en las peticiones URI pasadas ??a la biblioteca como objeto java.net.URI y elegir el host de destino equivocado para una ejecución de la petición Red Hat Decisio... • https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749%40%3Cissues.maven.apache.org%3E • CWE-20: Improper Input Validation •

CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14847

https://notcve.org/view.php?id=CVE-2020-14847

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). • https://www.oracle.com/security-alerts/cpuoct2020.html •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14832

https://notcve.org/view.php?id=CVE-2020-14832

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact addit... • https://www.oracle.com/security-alerts/cpuoct2020.html •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14801

https://notcve.org/view.php?id=CVE-2020-14801

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact addi... • https://www.oracle.com/security-alerts/cpuoct2020.html •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14802

https://notcve.org/view.php?id=CVE-2020-14802

CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14806

https://notcve.org/view.php?id=CVE-2020-14806

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). • https://www.oracle.com/security-alerts/cpuoct2020.html •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-14813

https://notcve.org/view.php?id=CVE-2020-14813

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Grids). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional pro... • https://www.oracle.com/security-alerts/cpuoct2020.html •

CVSS: 6.5EPSS: 2%CPEs: 2EXPL: 0

CVE-2020-14795

https://notcve.org/view.php?id=CVE-2020-14795

21 Oct 2020 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ... • https://www.oracle.com/security-alerts/cpuoct2020.html •

1...3 4 5 6 7