# CVEs published 2020-01-15

278 CVEs were published on January 15, 2020: 5 critical, 46 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-19854](https://cve.now/CVE-2019-19854.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19855](https://cve.now/CVE-2019-19855.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19856](https://cve.now/CVE-2019-19856.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19857](https://cve.now/CVE-2019-19857.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19858](https://cve.now/CVE-2019-19858.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19859](https://cve.now/CVE-2019-19859.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-20097](https://cve.now/CVE-2019-20097.md): Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version… (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2019-15012](https://cve.now/CVE-2019-15012.md): Bitbucket Server and Bitbucket Data Center from version 4.13. (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2019-15010](https://cve.now/CVE-2019-15010.md): Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11… (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2009-5068](https://cve.now/CVE-2009-5068.md): There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. (no CVSS, SMF)
- [CVE-2009-5025](https://cve.now/CVE-2009-5025.md): A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on… (no CVSS, PyForum)
- [CVE-2009-3724](https://cve.now/CVE-2009-3724.md): python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. (no CVSS, python-markdown2 · markdown2)
- [CVE-2019-15961](https://cve.now/CVE-2019-15961.md): Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability (CVSS 7.5, ClamAV)
- [CVE-2020-3941](https://cve.now/CVE-2020-3941.md): The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual… (no CVSS, VMware Tools for Windows)
- [CVE-2020-1929](https://cve.now/CVE-2020-1929.md): The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. (no CVSS, Apache Beam · org.apache.beam:beam-sdks-java-io-mongodb)
- [CVE-2019-18244](https://cve.now/CVE-2019-18244.md): In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts… (no CVSS, OSIsoft PI System multiple products and versions)
- [CVE-2019-18273](https://cve.now/CVE-2019-18273.md): OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. (no CVSS, OSIsoft PI Vision)
- [CVE-2019-18271](https://cve.now/CVE-2019-18271.md): OSIsoft PI Vision, All versions of PI Vision prior to 2019. (no CVSS, OSIsoft PI Vision)
- [CVE-2019-18275](https://cve.now/CVE-2019-18275.md): OSIsoft PI Vision, All versions of PI Vision prior to 2019. (no CVSS, OSIsoft PI Vision)
- [CVE-2015-6591](https://cve.now/CVE-2015-6591.md): Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local… (no CVSS)
- [CVE-2015-1811](https://cve.now/CVE-2015-1811.md): XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary… (no CVSS, CloudBees Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2015-1809](https://cve.now/CVE-2015-1809.md): XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary… (no CVSS, CloudBees Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2014-6448](https://cve.now/CVE-2014-6448.md): Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and… (no CVSS)
- [CVE-2009-1120](https://cve.now/CVE-2009-1120.md): EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. (no CVSS, EMC RepliStor)
- [CVE-2015-5071](https://cve.now/CVE-2015-5071.md): AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to… (no CVSS)
- [CVE-2015-5072](https://cve.now/CVE-2015-5072.md): The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated… (no CVSS)
- [CVE-2019-9510](https://cve.now/CVE-2019-9510.md): Microsoft Windows RDP can bypass the Windows lock screen (CVSS 5.3, Microsoft Windows 10 or newer system using RDP · Microsoft…)
- [CVE-2019-9493](https://cve.now/CVE-2019-9493.md): MyCar Controls uses hard-coded credentials (CVSS 6.5, AutoMobility Distribution MyCar Controls)
- [CVE-2017-3211](https://cve.now/CVE-2017-3211.md): Centire Yopify leaks customer information (CVSS 5.3, Centire Yopify)
- [CVE-2015-6497](https://cve.now/CVE-2015-6497.md): The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise… (no CVSS, magento/core)
- [CVE-2007-4774](https://cve.now/CVE-2007-4774.md): The Linux kernel before 2.4.36-rc1 has a race condition. (no CVSS)
- [CVE-2020-2725](https://cve.now/CVE-2020-2725.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2726](https://cve.now/CVE-2020-2726.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2727](https://cve.now/CVE-2020-2727.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2728](https://cve.now/CVE-2020-2728.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). (CVSS 7.5, Oracle Identity Manager)
- [CVE-2020-2729](https://cve.now/CVE-2020-2729.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). (CVSS 5.4, Oracle Identity Manager)
- [CVE-2020-2730](https://cve.now/CVE-2020-2730.md): Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications… (CVSS 5.4, Oracle Financial Services Revenue Management and Billing)
- [CVE-2020-2731](https://cve.now/CVE-2020-2731.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 3.9, Oracle Database)
- [CVE-2020-2704](https://cve.now/CVE-2020-2704.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2705](https://cve.now/CVE-2020-2705.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2707](https://cve.now/CVE-2020-2707.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component… (CVSS 5.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2709](https://cve.now/CVE-2020-2709.md): Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). (CVSS 4.7, Oracle iLearning)
- [CVE-2020-2710](https://cve.now/CVE-2020-2710.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Payments)
- [CVE-2020-2711](https://cve.now/CVE-2020-2711.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Payments)
- [CVE-2020-2712](https://cve.now/CVE-2020-2712.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Payments)
- [CVE-2020-2713](https://cve.now/CVE-2020-2713.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 7.1, Oracle Banking Payments)
- [CVE-2020-2714](https://cve.now/CVE-2020-2714.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 4.3, Oracle Banking Payments)
- [CVE-2020-2715](https://cve.now/CVE-2020-2715.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Corporate Lending)
- [CVE-2020-2716](https://cve.now/CVE-2020-2716.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Corporate Lending)
- [CVE-2020-2717](https://cve.now/CVE-2020-2717.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Corporate Lending)
- [CVE-2020-2718](https://cve.now/CVE-2020-2718.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 7.1, Oracle Banking Corporate Lending)
- [CVE-2020-2719](https://cve.now/CVE-2020-2719.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 4.3, Oracle Banking Corporate Lending)
- [CVE-2020-2720](https://cve.now/CVE-2020-2720.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2721](https://cve.now/CVE-2020-2721.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 6.5, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2722](https://cve.now/CVE-2020-2722.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2723](https://cve.now/CVE-2020-2723.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 7.1, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2724](https://cve.now/CVE-2020-2724.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 4.3, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2684](https://cve.now/CVE-2020-2684.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 6.5, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2685](https://cve.now/CVE-2020-2685.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2686](https://cve.now/CVE-2020-2686.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2687](https://cve.now/CVE-2020-2687.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). (CVSS 4.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2688](https://cve.now/CVE-2020-2688.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications… (CVSS 7.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-2689](https://cve.now/CVE-2020-2689.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2690](https://cve.now/CVE-2020-2690.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2691](https://cve.now/CVE-2020-2691.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2692](https://cve.now/CVE-2020-2692.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2693](https://cve.now/CVE-2020-2693.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-2694](https://cve.now/CVE-2020-2694.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 3.1, Oracle MySQL Server)
- [CVE-2020-2695](https://cve.now/CVE-2020-2695.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). (CVSS 5.3, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2020-2696](https://cve.now/CVE-2020-2696.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 8.8, Oracle Solaris Operating System)
- [CVE-2020-2697](https://cve.now/CVE-2020-2697.md): Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. (CVSS 4.9, Oracle Hospitality Suites Management)
- [CVE-2020-2698](https://cve.now/CVE-2020-2698.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2699](https://cve.now/CVE-2020-2699.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 7.1, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2700](https://cve.now/CVE-2020-2700.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 4.3, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2701](https://cve.now/CVE-2020-2701.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2702](https://cve.now/CVE-2020-2702.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2703](https://cve.now/CVE-2020-2703.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2664](https://cve.now/CVE-2020-2664.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 4.6, Oracle Solaris Operating System)
- [CVE-2020-2665](https://cve.now/CVE-2020-2665.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2666](https://cve.now/CVE-2020-2666.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 5.3, Oracle Applications Framework)
- [CVE-2020-2667](https://cve.now/CVE-2020-2667.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2668](https://cve.now/CVE-2020-2668.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2669](https://cve.now/CVE-2020-2669.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2670](https://cve.now/CVE-2020-2670.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2671](https://cve.now/CVE-2020-2671.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2672](https://cve.now/CVE-2020-2672.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2673](https://cve.now/CVE-2020-2673.md): Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). (CVSS 7.5, Oracle Application Testing Suite)
- [CVE-2020-2674](https://cve.now/CVE-2020-2674.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2675](https://cve.now/CVE-2020-2675.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). (CVSS 7.1, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2676](https://cve.now/CVE-2020-2676.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing). (CVSS 6.1, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2677](https://cve.now/CVE-2020-2677.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). (CVSS 5.7, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2678](https://cve.now/CVE-2020-2678.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.4, Oracle VM VirtualBox)
- [CVE-2020-2679](https://cve.now/CVE-2020-2679.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2680](https://cve.now/CVE-2020-2680.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 6.0, Oracle Solaris Operating System)
- [CVE-2020-2681](https://cve.now/CVE-2020-2681.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2682](https://cve.now/CVE-2020-2682.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2683](https://cve.now/CVE-2020-2683.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2644](https://cve.now/CVE-2020-2644.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2645](https://cve.now/CVE-2020-2645.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2646](https://cve.now/CVE-2020-2646.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface). (CVSS 5.4, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2647](https://cve.now/CVE-2020-2647.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.0, Oracle Solaris Operating System)
- [CVE-2020-2648](https://cve.now/CVE-2020-2648.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component… (CVSS 6.2, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2649](https://cve.now/CVE-2020-2649.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component… (CVSS 3.3, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2650](https://cve.now/CVE-2020-2650.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component… (CVSS 6.5, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2651](https://cve.now/CVE-2020-2651.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2652](https://cve.now/CVE-2020-2652.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2653](https://cve.now/CVE-2020-2653.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2654](https://cve.now/CVE-2020-2654.md): Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java)
- [CVE-2020-2655](https://cve.now/CVE-2020-2655.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 4.8, Oracle Java)
- [CVE-2020-2656](https://cve.now/CVE-2020-2656.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). (CVSS 4.4, Oracle Solaris Operating System)
- [CVE-2020-2657](https://cve.now/CVE-2020-2657.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2658](https://cve.now/CVE-2020-2658.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2659](https://cve.now/CVE-2020-2659.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (CVSS 3.7, Oracle Java)
- [CVE-2020-2660](https://cve.now/CVE-2020-2660.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2661](https://cve.now/CVE-2020-2661.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2662](https://cve.now/CVE-2020-2662.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2663](https://cve.now/CVE-2020-2663.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2624](https://cve.now/CVE-2020-2624.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2625](https://cve.now/CVE-2020-2625.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2626](https://cve.now/CVE-2020-2626.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2627](https://cve.now/CVE-2020-2627.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2628](https://cve.now/CVE-2020-2628.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2629](https://cve.now/CVE-2020-2629.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2630](https://cve.now/CVE-2020-2630.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2631](https://cve.now/CVE-2020-2631.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2632](https://cve.now/CVE-2020-2632.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2633](https://cve.now/CVE-2020-2633.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2634](https://cve.now/CVE-2020-2634.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2635](https://cve.now/CVE-2020-2635.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2636](https://cve.now/CVE-2020-2636.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2637](https://cve.now/CVE-2020-2637.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based). (CVSS 6.0, Enterprise Manager for Oracle Database)
- [CVE-2020-2638](https://cve.now/CVE-2020-2638.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2639](https://cve.now/CVE-2020-2639.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2640](https://cve.now/CVE-2020-2640.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2641](https://cve.now/CVE-2020-2641.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2642](https://cve.now/CVE-2020-2642.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2643](https://cve.now/CVE-2020-2643.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2603](https://cve.now/CVE-2020-2603.md): Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). (CVSS 6.1, Oracle Field Service)
- [CVE-2020-2604](https://cve.now/CVE-2020-2604.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 8.1, Oracle Java)
- [CVE-2020-2605](https://cve.now/CVE-2020-2605.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 7.1, Oracle Solaris Operating System)
- [CVE-2020-2606](https://cve.now/CVE-2020-2606.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2607](https://cve.now/CVE-2020-2607.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2608](https://cve.now/CVE-2020-2608.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2609](https://cve.now/CVE-2020-2609.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.3, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2610](https://cve.now/CVE-2020-2610.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2611](https://cve.now/CVE-2020-2611.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2612](https://cve.now/CVE-2020-2612.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2613](https://cve.now/CVE-2020-2613.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2614](https://cve.now/CVE-2020-2614.md): Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh). (CVSS 6.0, Oracle APM - Application Performance Management)
- [CVE-2020-2615](https://cve.now/CVE-2020-2615.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2616](https://cve.now/CVE-2020-2616.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2617](https://cve.now/CVE-2020-2617.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2618](https://cve.now/CVE-2020-2618.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2619](https://cve.now/CVE-2020-2619.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2620](https://cve.now/CVE-2020-2620.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2621](https://cve.now/CVE-2020-2621.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2622](https://cve.now/CVE-2020-2622.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2623](https://cve.now/CVE-2020-2623.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2583](https://cve.now/CVE-2020-2583.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2584](https://cve.now/CVE-2020-2584.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2585](https://cve.now/CVE-2020-2585.md): Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). (CVSS 5.9, Oracle Java)
- [CVE-2020-2586](https://cve.now/CVE-2020-2586.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 9.9, Oracle Human Resources)
- [CVE-2020-2587](https://cve.now/CVE-2020-2587.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 9.9, Oracle Human Resources)
- [CVE-2020-2588](https://cve.now/CVE-2020-2588.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2589](https://cve.now/CVE-2020-2589.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2590](https://cve.now/CVE-2020-2590.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 3.7, Oracle Java)
- [CVE-2020-2591](https://cve.now/CVE-2020-2591.md): Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). (CVSS 8.2, Oracle Web Applications Desktop Integrator)
- [CVE-2020-2592](https://cve.now/CVE-2020-2592.md): Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). (CVSS 5.3, Oracle AutoVue 3D Professional Advanced)
- [CVE-2020-2593](https://cve.now/CVE-2020-2593.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (CVSS 4.8, Oracle Java)
- [CVE-2020-2595](https://cve.now/CVE-2020-2595.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 5.8, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2596](https://cve.now/CVE-2020-2596.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Message Hooks). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2597](https://cve.now/CVE-2020-2597.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page). (CVSS 4.7, Oracle One-to-One Fulfillment)
- [CVE-2020-2598](https://cve.now/CVE-2020-2598.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2599](https://cve.now/CVE-2020-2599.md): Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications (component: MMS All). (CVSS 4.2, Oracle Hospitality Cruise Materials Management)
- [CVE-2020-2600](https://cve.now/CVE-2020-2600.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2601](https://cve.now/CVE-2020-2601.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 6.8, Oracle Java)
- [CVE-2020-2602](https://cve.now/CVE-2020-2602.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2561](https://cve.now/CVE-2020-2561.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). (CVSS 4.3, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2020-2563](https://cve.now/CVE-2020-2563.md): Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). (CVSS 4.2, Oracle Hyperion Financial Close Management)
- [CVE-2020-2564](https://cve.now/CVE-2020-2564.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). (CVSS 5.3, Oracle Siebel UI Framework)
- [CVE-2020-2565](https://cve.now/CVE-2020-2565.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). (CVSS 7.5, Oracle Solaris Operating System)
- [CVE-2020-2566](https://cve.now/CVE-2020-2566.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 4.7, Oracle Applications Framework)
- [CVE-2020-2567](https://cve.now/CVE-2020-2567.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component… (CVSS 4.8, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2568](https://cve.now/CVE-2020-2568.md): Vulnerability in the Oracle Applications DBA component of Oracle Database Server. (CVSS 3.9, Oracle Database)
- [CVE-2020-2569](https://cve.now/CVE-2020-2569.md): Vulnerability in the Oracle Applications DBA component of Oracle Database Server. (CVSS 3.9, Oracle PL/SQL)
- [CVE-2020-2570](https://cve.now/CVE-2020-2570.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2571](https://cve.now/CVE-2020-2571.md): Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). (CVSS 3.3, Oracle LDOMS)
- [CVE-2020-2572](https://cve.now/CVE-2020-2572.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2020-2573](https://cve.now/CVE-2020-2573.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2574](https://cve.now/CVE-2020-2574.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2576](https://cve.now/CVE-2020-2576.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2577](https://cve.now/CVE-2020-2577.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2578](https://cve.now/CVE-2020-2578.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.8, Oracle Solaris Operating System)
- [CVE-2020-2579](https://cve.now/CVE-2020-2579.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2580](https://cve.now/CVE-2020-2580.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2581](https://cve.now/CVE-2020-2581.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). (CVSS 4.0, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2582](https://cve.now/CVE-2020-2582.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2020-2541](https://cve.now/CVE-2020-2541.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2542](https://cve.now/CVE-2020-2542.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2543](https://cve.now/CVE-2020-2543.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2544](https://cve.now/CVE-2020-2544.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2545](https://cve.now/CVE-2020-2545.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). (CVSS 5.3, Oracle Security Service)
- [CVE-2020-2546](https://cve.now/CVE-2020-2546.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2547](https://cve.now/CVE-2020-2547.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2548](https://cve.now/CVE-2020-2548.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2549](https://cve.now/CVE-2020-2549.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2550](https://cve.now/CVE-2020-2550.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 5.1, Oracle WebLogic Server)
- [CVE-2020-2551](https://cve.now/CVE-2020-2551.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-2552](https://cve.now/CVE-2020-2552.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2555](https://cve.now/CVE-2020-2555.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). (CVSS 9.8, KEV, Oracle WebCenter Portal · Oracle Utilities Framework)
- [CVE-2020-2556](https://cve.now/CVE-2020-2556.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). (CVSS 7.3, Oracle Primavera P6 Professional Project Management)
- [CVE-2020-2557](https://cve.now/CVE-2020-2557.md): Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Security). (CVSS 4.7, Oracle Demantra Demand Management)
- [CVE-2020-2558](https://cve.now/CVE-2020-2558.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.8, Oracle Solaris Operating System)
- [CVE-2020-2559](https://cve.now/CVE-2020-2559.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI). (CVSS 5.3, Oracle Siebel UI Framework)
- [CVE-2020-2560](https://cve.now/CVE-2020-2560.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). (CVSS 4.7, Oracle Siebel UI Framework)
- [CVE-2020-2510](https://cve.now/CVE-2020-2510.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 7.5, Oracle Database)
- [CVE-2020-2511](https://cve.now/CVE-2020-2511.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 7.7, Oracle Database)
- [CVE-2020-2512](https://cve.now/CVE-2020-2512.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 5.9, Oracle Database)
- [CVE-2020-2515](https://cve.now/CVE-2020-2515.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 5.0, Oracle Database)
- [CVE-2020-2516](https://cve.now/CVE-2020-2516.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 2.4, Oracle Database)
- [CVE-2020-2517](https://cve.now/CVE-2020-2517.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 3.3, Oracle Database)
- [CVE-2020-2518](https://cve.now/CVE-2020-2518.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 7.5, Oracle Database)
- [CVE-2020-2519](https://cve.now/CVE-2020-2519.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2527](https://cve.now/CVE-2020-2527.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 4.1, Oracle Database)
- [CVE-2020-2530](https://cve.now/CVE-2020-2530.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 6.1, Oracle HTTP Server)
- [CVE-2020-2531](https://cve.now/CVE-2020-2531.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). (CVSS 3.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2533](https://cve.now/CVE-2020-2533.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 6.1, Oracle Reports Developer)
- [CVE-2020-2534](https://cve.now/CVE-2020-2534.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 6.1, Oracle Reports Developer)
- [CVE-2020-2535](https://cve.now/CVE-2020-2535.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). (CVSS 4.7, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2536](https://cve.now/CVE-2020-2536.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 5.4, Oracle Outside In Technology)
- [CVE-2020-2537](https://cve.now/CVE-2020-2537.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 7.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2538](https://cve.now/CVE-2020-2538.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 7.1, Oracle WebCenter Sites)
- [CVE-2020-2539](https://cve.now/CVE-2020-2539.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 6.1, Oracle WebCenter Sites)
- [CVE-2020-2540](https://cve.now/CVE-2020-2540.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2015-5230](https://cve.now/CVE-2015-5230.md): The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a… (no CVSS, PowerDNS Authoritative Server)
- [CVE-2007-4773](https://cve.now/CVE-2007-4773.md): Systrace before 1.6.0 has insufficient escape policy enforcement. (no CVSS)
- [CVE-2015-5952](https://cve.now/CVE-2015-5952.md): Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item… (no CVSS)
- [CVE-2019-16467](https://cve.now/CVE-2019-16467.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16468](https://cve.now/CVE-2019-16468.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16469](https://cve.now/CVE-2019-16469.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16466](https://cve.now/CVE-2019-16466.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2005-4891](https://cve.now/CVE-2005-4891.md): Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary… (no CVSS, Simple Machine Forum)
- [CVE-2015-5466](https://cve.now/CVE-2015-5466.md): Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local… (no CVSS)
- [CVE-2015-5484](https://cve.now/CVE-2015-5484.md): Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject… (no CVSS)
- [CVE-2020-2096](https://cve.now/CVE-2020-2096.md): Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build\_now endpoint, resulting in a reflected XSS… (no CVSS, Jenkins project Jenkins Gitlab Hook Plugin · org.jenkins-ci…)
- [CVE-2020-2097](https://cve.now/CVE-2020-2097.md): Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with… (no CVSS, Jenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…)
- [CVE-2020-2098](https://cve.now/CVE-2020-2098.md): A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as… (no CVSS, Jenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…)
- [CVE-2020-2094](https://cve.now/CVE-2020-2094.md): A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to… (no CVSS, Jenkins project Jenkins Health Advisor by CloudBees Plugin…)
- [CVE-2020-2095](https://cve.now/CVE-2020-2095.md): Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master… (no CVSS, Jenkins project Jenkins Redgate SQL Change Automation Plugi…)
- [CVE-2020-2092](https://cve.now/CVE-2020-2092.md): Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing… (no CVSS, Jenkins project Jenkins Robot Framework Plugin · org.jenkin…)
- [CVE-2020-2093](https://cve.now/CVE-2020-2093.md): A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email… (no CVSS, Jenkins project Jenkins Health Advisor by CloudBees Plugin…)
- [CVE-2020-2090](https://cve.now/CVE-2020-2090.md): A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an… (no CVSS, Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…)
- [CVE-2019-18412](https://cve.now/CVE-2019-18412.md): JetBrains IDETalk plugin before version 193.4099.10 allows XXE (no CVSS)
- [CVE-2015-7874](https://cve.now/CVE-2015-7874.md): Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long… (no CVSS)
- [CVE-2015-7556](https://cve.now/CVE-2015-7556.md): DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program. (no CVSS, National Institute of Advanced Industrial Science and Techn…)
- [CVE-2015-8549](https://cve.now/CVE-2015-8549.md): XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files… (no CVSS, pyamf)
- [CVE-2011-4907](https://cve.now/CVE-2011-4907.md): Joomla! 1.5x through 1.5.12: Missing JEXEC Check (no CVSS, Joomla!)
- [CVE-2011-4336](https://cve.now/CVE-2011-4336.md): Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf\_ajax.php. (no CVSS, Tiki Wiki CMS Groupware)
- [CVE-2012-0070](https://cve.now/CVE-2012-0070.md): spamdyke prior to 4.2.1: STARTTLS reveals plaintext (no CVSS, spamdyke)
- [CVE-2012-1326](https://cve.now/CVE-2012-1326.md): Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which… (no CVSS, Cisco IronPort Web Security Appliance)
- [CVE-2012-1316](https://cve.now/CVE-2012-1316.md): Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks (no CVSS, Cisco IronPort Web Security Appliance)
- [CVE-2012-1563](https://cve.now/CVE-2012-1563.md): Joomla! before 2.5.3 allows Admin Account Creation. (no CVSS, Joomla!)
- [CVE-2012-1562](https://cve.now/CVE-2012-1562.md): Joomla! core before 2.5.3 allows unauthorized password change. (no CVSS, Joomla! core)
- [CVE-2012-0334](https://cve.now/CVE-2012-0334.md): Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow… (no CVSS, Cisco IronPort Web Security Appliance AsyncOS)
- [CVE-2012-0945](https://cve.now/CVE-2012-0945.md): whoopsie-daisy before 0.1.26: Root user can remove arbitrary files (no CVSS, whoopsie-daisy)
- [CVE-2020-1611](https://cve.now/CVE-2020-1611.md): Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device. (CVSS 6.5, Juniper Networks Junos Space)
- [CVE-2020-1609](https://cve.now/CVE-2020-1609.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands… (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-1608](https://cve.now/CVE-2020-1608.md): Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1607](https://cve.now/CVE-2020-1607.md): Junos OS: Cross-Site Scripting (XSS) in J-Web (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1606](https://cve.now/CVE-2020-1606.md): Junos OS: Path traversal vulnerability in J-Web (CVSS 5.4, Juniper Networks Junos OS)
- [CVE-2020-1605](https://cve.now/CVE-2020-1605.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands… (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-1604](https://cve.now/CVE-2020-1604.md): Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1603](https://cve.now/CVE-2020-1603.md): Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device. (CVSS 8.6, Juniper Networks Junos OS)
- [CVE-2020-1602](https://cve.now/CVE-2020-1602.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution… (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2020-1601](https://cve.now/CVE-2020-1601.md): Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2020-1600](https://cve.now/CVE-2020-1600.md): Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-7058](https://cve.now/CVE-2020-7058.md): data\_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -\> Data Input Methods -\> Unix -\>… (no CVSS)
- [CVE-2020-2091](https://cve.now/CVE-2020-2091.md): A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an… (no CVSS, Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2020-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.