Archive
July 2020
Vulnerabilities first published in this month (UTC), newest first.
253 results · Clear filters · Feed
-
High 7.6
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…
-
High 8.3
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is J…
-
High 7.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (compone…
-
High 7.5
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore). Supported versions t…
-
High 7.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported ver…
-
High 8.1
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: An…
-
High 8.6
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versi…
-
High 7.6
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Up…
-
High 8.2
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 8.2
Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server). T…
-
High 7.1
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servi…
-
High 8.2
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). Supported versions t…
-
High 8.6
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: An…
-
High 8.2
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Address Book). Supported versions tha…
-
High 7.4
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…
-
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…
-
High 8.3
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…
-
High 8.2
Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (com…
-
High 8.2
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Suppor…
-
High 8.2
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration). Supported version…
-
High 8.2
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…
-
High 8.2
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported ver…
-
High 7.2
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported ver…
-
High 8.1
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
High 7.3
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compo…
-
High 7.1
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported ver…
-
High 8.1
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Security). Supported vers…
-
High 7.4
Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Su…
-
High 7.4
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…
-
High 8.2
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). The supporte…
-
High 7.3
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compo…
-
High 8.1
Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalation vulnerability.
-
High 8.0
Stored XSS vulnerability in Jenkins Deployer Framework Plugin
Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerability.
-
High 8.0
Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.
-
High 8.0
Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin
Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.
-
High 8.0
Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.
-
High 8.0
Stored XSS vulnerability in Jenkins console links
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.
-
High 8.0
Stored XSS vulnerability in Jenkins job build time trend
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.