# CVEs published 2020-01-15

278 CVEs were published on January 15, 2020: 5 critical, 46 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-19854](https://cve.now/CVE-2019-19854.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19855](https://cve.now/CVE-2019-19855.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19856](https://cve.now/CVE-2019-19856.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19857](https://cve.now/CVE-2019-19857.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19858](https://cve.now/CVE-2019-19858.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-19859](https://cve.now/CVE-2019-19859.md): An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. (no CVSS)
- [CVE-2019-20097](https://cve.now/CVE-2019-20097.md): Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2019-15012](https://cve.now/CVE-2019-15012.md): Bitbucket Server and Bitbucket Data Center from version 4.13. (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2019-15010](https://cve.now/CVE-2019-15010.md): Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, fr (no CVSS, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2009-5068](https://cve.now/CVE-2009-5068.md): There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. (no CVSS, SMF)
- [CVE-2009-5025](https://cve.now/CVE-2009-5025.md): A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on beh (no CVSS, PyForum)
- [CVE-2009-3724](https://cve.now/CVE-2009-3724.md): python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. (no CVSS, python-markdown2 · markdown2)
- [CVE-2019-15961](https://cve.now/CVE-2019-15961.md): Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability (CVSS 7.5, ClamAV)
- [CVE-2020-3941](https://cve.now/CVE-2020-3941.md): The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine (no CVSS, VMware Tools for Windows)
- [CVE-2020-1929](https://cve.now/CVE-2020-1929.md): The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. (no CVSS, Apache Beam · org.apache.beam:beam-sdks-java-io-mongodb)
- [CVE-2019-18244](https://cve.now/CVE-2019-18244.md): In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts ar (no CVSS, OSIsoft PI System multiple products and versions)
- [CVE-2019-18273](https://cve.now/CVE-2019-18273.md): OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. (no CVSS, OSIsoft PI Vision)
- [CVE-2019-18271](https://cve.now/CVE-2019-18271.md): OSIsoft PI Vision, All versions of PI Vision prior to 2019. (no CVSS, OSIsoft PI Vision)
- [CVE-2019-18275](https://cve.now/CVE-2019-18275.md): OSIsoft PI Vision, All versions of PI Vision prior to 2019. (no CVSS, OSIsoft PI Vision)
- [CVE-2015-6591](https://cve.now/CVE-2015-6591.md): Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local u (no CVSS)
- [CVE-2015-1811](https://cve.now/CVE-2015-1811.md): XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary X (no CVSS, CloudBees Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2015-1809](https://cve.now/CVE-2015-1809.md): XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary X (no CVSS, CloudBees Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2014-6448](https://cve.now/CVE-2014-6448.md): Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute (no CVSS)
- [CVE-2009-1120](https://cve.now/CVE-2009-1120.md): EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. (no CVSS, EMC RepliStor)
- [CVE-2015-5071](https://cve.now/CVE-2015-5071.md): AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to " (no CVSS)
- [CVE-2015-5072](https://cve.now/CVE-2015-5072.md): The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users (no CVSS)
- [CVE-2019-9510](https://cve.now/CVE-2019-9510.md): Microsoft Windows RDP can bypass the Windows lock screen (CVSS 5.3, Microsoft Windows 10 or newer system using RDP · Microsoft…)
- [CVE-2019-9493](https://cve.now/CVE-2019-9493.md): MyCar Controls uses hard-coded credentials (CVSS 6.5, AutoMobility Distribution MyCar Controls)
- [CVE-2017-3211](https://cve.now/CVE-2017-3211.md): Centire Yopify leaks customer information (CVSS 5.3, Centire Yopify)
- [CVE-2015-6497](https://cve.now/CVE-2015-6497.md): The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise E (no CVSS, magento/core)
- [CVE-2007-4774](https://cve.now/CVE-2007-4774.md): The Linux kernel before 2.4.36-rc1 has a race condition. (no CVSS)
- [CVE-2020-2725](https://cve.now/CVE-2020-2725.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2726](https://cve.now/CVE-2020-2726.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2727](https://cve.now/CVE-2020-2727.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2728](https://cve.now/CVE-2020-2728.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). (CVSS 7.5, Oracle Identity Manager)
- [CVE-2020-2729](https://cve.now/CVE-2020-2729.md): Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). (CVSS 5.4, Oracle Identity Manager)
- [CVE-2020-2730](https://cve.now/CVE-2020-2730.md): Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: (CVSS 5.4, Oracle Financial Services Revenue Management and Billing)
- [CVE-2020-2731](https://cve.now/CVE-2020-2731.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 3.9, Oracle Database)
- [CVE-2020-2704](https://cve.now/CVE-2020-2704.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2705](https://cve.now/CVE-2020-2705.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2707](https://cve.now/CVE-2020-2707.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: WebAcce (CVSS 5.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2709](https://cve.now/CVE-2020-2709.md): Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). (CVSS 4.7, Oracle iLearning)
- [CVE-2020-2710](https://cve.now/CVE-2020-2710.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Payments)
- [CVE-2020-2711](https://cve.now/CVE-2020-2711.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Payments)
- [CVE-2020-2712](https://cve.now/CVE-2020-2712.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Payments)
- [CVE-2020-2713](https://cve.now/CVE-2020-2713.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 7.1, Oracle Banking Payments)
- [CVE-2020-2714](https://cve.now/CVE-2020-2714.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 4.3, Oracle Banking Payments)
- [CVE-2020-2715](https://cve.now/CVE-2020-2715.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Corporate Lending)
- [CVE-2020-2716](https://cve.now/CVE-2020-2716.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Corporate Lending)
- [CVE-2020-2717](https://cve.now/CVE-2020-2717.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 5.4, Oracle Banking Corporate Lending)
- [CVE-2020-2718](https://cve.now/CVE-2020-2718.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 7.1, Oracle Banking Corporate Lending)
- [CVE-2020-2719](https://cve.now/CVE-2020-2719.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 4.3, Oracle Banking Corporate Lending)
- [CVE-2020-2720](https://cve.now/CVE-2020-2720.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2721](https://cve.now/CVE-2020-2721.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 6.5, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2722](https://cve.now/CVE-2020-2722.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2723](https://cve.now/CVE-2020-2723.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 7.1, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2724](https://cve.now/CVE-2020-2724.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 4.3, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-2684](https://cve.now/CVE-2020-2684.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 6.5, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2685](https://cve.now/CVE-2020-2685.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2686](https://cve.now/CVE-2020-2686.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2687](https://cve.now/CVE-2020-2687.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). (CVSS 4.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2688](https://cve.now/CVE-2020-2688.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 7.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-2689](https://cve.now/CVE-2020-2689.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2690](https://cve.now/CVE-2020-2690.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2691](https://cve.now/CVE-2020-2691.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2692](https://cve.now/CVE-2020-2692.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2693](https://cve.now/CVE-2020-2693.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-2694](https://cve.now/CVE-2020-2694.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 3.1, Oracle MySQL Server)
- [CVE-2020-2695](https://cve.now/CVE-2020-2695.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). (CVSS 5.3, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2020-2696](https://cve.now/CVE-2020-2696.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 8.8, Oracle Solaris Operating System)
- [CVE-2020-2697](https://cve.now/CVE-2020-2697.md): Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. (CVSS 4.9, Oracle Hospitality Suites Management)
- [CVE-2020-2698](https://cve.now/CVE-2020-2698.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2699](https://cve.now/CVE-2020-2699.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 7.1, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2700](https://cve.now/CVE-2020-2700.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 4.3, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2701](https://cve.now/CVE-2020-2701.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2702](https://cve.now/CVE-2020-2702.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2703](https://cve.now/CVE-2020-2703.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2664](https://cve.now/CVE-2020-2664.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 4.6, Oracle Solaris Operating System)
- [CVE-2020-2665](https://cve.now/CVE-2020-2665.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2666](https://cve.now/CVE-2020-2666.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 5.3, Oracle Applications Framework)
- [CVE-2020-2667](https://cve.now/CVE-2020-2667.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2668](https://cve.now/CVE-2020-2668.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2669](https://cve.now/CVE-2020-2669.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2670](https://cve.now/CVE-2020-2670.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2671](https://cve.now/CVE-2020-2671.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2672](https://cve.now/CVE-2020-2672.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2673](https://cve.now/CVE-2020-2673.md): Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). (CVSS 7.5, Oracle Application Testing Suite)
- [CVE-2020-2674](https://cve.now/CVE-2020-2674.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2675](https://cve.now/CVE-2020-2675.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). (CVSS 7.1, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2676](https://cve.now/CVE-2020-2676.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing). (CVSS 6.1, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2677](https://cve.now/CVE-2020-2677.md): Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). (CVSS 5.7, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-2678](https://cve.now/CVE-2020-2678.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.4, Oracle VM VirtualBox)
- [CVE-2020-2679](https://cve.now/CVE-2020-2679.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2680](https://cve.now/CVE-2020-2680.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 6.0, Oracle Solaris Operating System)
- [CVE-2020-2681](https://cve.now/CVE-2020-2681.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2682](https://cve.now/CVE-2020-2682.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2683](https://cve.now/CVE-2020-2683.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 5.4, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-2644](https://cve.now/CVE-2020-2644.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2645](https://cve.now/CVE-2020-2645.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2646](https://cve.now/CVE-2020-2646.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface). (CVSS 5.4, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2647](https://cve.now/CVE-2020-2647.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.0, Oracle Solaris Operating System)
- [CVE-2020-2648](https://cve.now/CVE-2020-2648.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Interna (CVSS 6.2, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2649](https://cve.now/CVE-2020-2649.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Interna (CVSS 3.3, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2650](https://cve.now/CVE-2020-2650.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promoti (CVSS 6.5, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2651](https://cve.now/CVE-2020-2651.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2652](https://cve.now/CVE-2020-2652.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2653](https://cve.now/CVE-2020-2653.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2654](https://cve.now/CVE-2020-2654.md): Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java)
- [CVE-2020-2655](https://cve.now/CVE-2020-2655.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 4.8, Oracle Java)
- [CVE-2020-2656](https://cve.now/CVE-2020-2656.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). (CVSS 4.4, Oracle Solaris Operating System)
- [CVE-2020-2657](https://cve.now/CVE-2020-2657.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2658](https://cve.now/CVE-2020-2658.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2659](https://cve.now/CVE-2020-2659.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (CVSS 3.7, Oracle Java)
- [CVE-2020-2660](https://cve.now/CVE-2020-2660.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2661](https://cve.now/CVE-2020-2661.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2662](https://cve.now/CVE-2020-2662.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2663](https://cve.now/CVE-2020-2663.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2624](https://cve.now/CVE-2020-2624.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2625](https://cve.now/CVE-2020-2625.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2626](https://cve.now/CVE-2020-2626.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2627](https://cve.now/CVE-2020-2627.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2628](https://cve.now/CVE-2020-2628.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2629](https://cve.now/CVE-2020-2629.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2630](https://cve.now/CVE-2020-2630.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2631](https://cve.now/CVE-2020-2631.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2632](https://cve.now/CVE-2020-2632.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2633](https://cve.now/CVE-2020-2633.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2634](https://cve.now/CVE-2020-2634.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2635](https://cve.now/CVE-2020-2635.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2636](https://cve.now/CVE-2020-2636.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2637](https://cve.now/CVE-2020-2637.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based). (CVSS 6.0, Enterprise Manager for Oracle Database)
- [CVE-2020-2638](https://cve.now/CVE-2020-2638.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2639](https://cve.now/CVE-2020-2639.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2640](https://cve.now/CVE-2020-2640.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2641](https://cve.now/CVE-2020-2641.md): Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2642](https://cve.now/CVE-2020-2642.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2643](https://cve.now/CVE-2020-2643.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2603](https://cve.now/CVE-2020-2603.md): Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). (CVSS 6.1, Oracle Field Service)
- [CVE-2020-2604](https://cve.now/CVE-2020-2604.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 8.1, Oracle Java)
- [CVE-2020-2605](https://cve.now/CVE-2020-2605.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 7.1, Oracle Solaris Operating System)
- [CVE-2020-2606](https://cve.now/CVE-2020-2606.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2607](https://cve.now/CVE-2020-2607.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2608](https://cve.now/CVE-2020-2608.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2609](https://cve.now/CVE-2020-2609.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.3, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2610](https://cve.now/CVE-2020-2610.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2611](https://cve.now/CVE-2020-2611.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2612](https://cve.now/CVE-2020-2612.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2613](https://cve.now/CVE-2020-2613.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2614](https://cve.now/CVE-2020-2614.md): Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh). (CVSS 6.0, Oracle APM - Application Performance Management)
- [CVE-2020-2615](https://cve.now/CVE-2020-2615.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2616](https://cve.now/CVE-2020-2616.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2617](https://cve.now/CVE-2020-2617.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2618](https://cve.now/CVE-2020-2618.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2619](https://cve.now/CVE-2020-2619.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2620](https://cve.now/CVE-2020-2620.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2621](https://cve.now/CVE-2020-2621.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2622](https://cve.now/CVE-2020-2622.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2623](https://cve.now/CVE-2020-2623.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework). (CVSS 6.0, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2583](https://cve.now/CVE-2020-2583.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2584](https://cve.now/CVE-2020-2584.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2585](https://cve.now/CVE-2020-2585.md): Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). (CVSS 5.9, Oracle Java)
- [CVE-2020-2586](https://cve.now/CVE-2020-2586.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 9.9, Oracle Human Resources)
- [CVE-2020-2587](https://cve.now/CVE-2020-2587.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 9.9, Oracle Human Resources)
- [CVE-2020-2588](https://cve.now/CVE-2020-2588.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2589](https://cve.now/CVE-2020-2589.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2590](https://cve.now/CVE-2020-2590.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 3.7, Oracle Java)
- [CVE-2020-2591](https://cve.now/CVE-2020-2591.md): Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). (CVSS 8.2, Oracle Web Applications Desktop Integrator)
- [CVE-2020-2592](https://cve.now/CVE-2020-2592.md): Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). (CVSS 5.3, Oracle AutoVue 3D Professional Advanced)
- [CVE-2020-2593](https://cve.now/CVE-2020-2593.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (CVSS 4.8, Oracle Java)
- [CVE-2020-2595](https://cve.now/CVE-2020-2595.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 5.8, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2596](https://cve.now/CVE-2020-2596.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Message Hooks). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2597](https://cve.now/CVE-2020-2597.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page). (CVSS 4.7, Oracle One-to-One Fulfillment)
- [CVE-2020-2598](https://cve.now/CVE-2020-2598.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2599](https://cve.now/CVE-2020-2599.md): Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications (component: MMS All). (CVSS 4.2, Oracle Hospitality Cruise Materials Management)
- [CVE-2020-2600](https://cve.now/CVE-2020-2600.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2601](https://cve.now/CVE-2020-2601.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 6.8, Oracle Java)
- [CVE-2020-2602](https://cve.now/CVE-2020-2602.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2561](https://cve.now/CVE-2020-2561.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer). (CVSS 4.3, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2020-2563](https://cve.now/CVE-2020-2563.md): Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). (CVSS 4.2, Oracle Hyperion Financial Close Management)
- [CVE-2020-2564](https://cve.now/CVE-2020-2564.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). (CVSS 5.3, Oracle Siebel UI Framework)
- [CVE-2020-2565](https://cve.now/CVE-2020-2565.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). (CVSS 7.5, Oracle Solaris Operating System)
- [CVE-2020-2566](https://cve.now/CVE-2020-2566.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 4.7, Oracle Applications Framework)
- [CVE-2020-2567](https://cve.now/CVE-2020-2567.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Securit (CVSS 4.8, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2568](https://cve.now/CVE-2020-2568.md): Vulnerability in the Oracle Applications DBA component of Oracle Database Server. (CVSS 3.9, Oracle Database)
- [CVE-2020-2569](https://cve.now/CVE-2020-2569.md): Vulnerability in the Oracle Applications DBA component of Oracle Database Server. (CVSS 3.9, Oracle PL/SQL)
- [CVE-2020-2570](https://cve.now/CVE-2020-2570.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2571](https://cve.now/CVE-2020-2571.md): Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). (CVSS 3.3, Oracle LDOMS)
- [CVE-2020-2572](https://cve.now/CVE-2020-2572.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2020-2573](https://cve.now/CVE-2020-2573.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2574](https://cve.now/CVE-2020-2574.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2576](https://cve.now/CVE-2020-2576.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2577](https://cve.now/CVE-2020-2577.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2578](https://cve.now/CVE-2020-2578.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.8, Oracle Solaris Operating System)
- [CVE-2020-2579](https://cve.now/CVE-2020-2579.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2580](https://cve.now/CVE-2020-2580.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2581](https://cve.now/CVE-2020-2581.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). (CVSS 4.0, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2582](https://cve.now/CVE-2020-2582.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.2, Oracle iStore)
- [CVE-2020-2541](https://cve.now/CVE-2020-2541.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2542](https://cve.now/CVE-2020-2542.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2020-2543](https://cve.now/CVE-2020-2543.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2544](https://cve.now/CVE-2020-2544.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2545](https://cve.now/CVE-2020-2545.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). (CVSS 5.3, Oracle Security Service)
- [CVE-2020-2546](https://cve.now/CVE-2020-2546.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2547](https://cve.now/CVE-2020-2547.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2548](https://cve.now/CVE-2020-2548.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2549](https://cve.now/CVE-2020-2549.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2550](https://cve.now/CVE-2020-2550.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 5.1, Oracle WebLogic Server)
- [CVE-2020-2551](https://cve.now/CVE-2020-2551.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-2552](https://cve.now/CVE-2020-2552.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 4.8, Oracle WebLogic Server)
- [CVE-2020-2555](https://cve.now/CVE-2020-2555.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). (CVSS 9.8, KEV, Oracle WebCenter Portal · Oracle Utilities Framework)
- [CVE-2020-2556](https://cve.now/CVE-2020-2556.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core). (CVSS 7.3, Oracle Primavera P6 Professional Project Management)
- [CVE-2020-2557](https://cve.now/CVE-2020-2557.md): Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Security). (CVSS 4.7, Oracle Demantra Demand Management)
- [CVE-2020-2558](https://cve.now/CVE-2020-2558.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.8, Oracle Solaris Operating System)
- [CVE-2020-2559](https://cve.now/CVE-2020-2559.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI). (CVSS 5.3, Oracle Siebel UI Framework)
- [CVE-2020-2560](https://cve.now/CVE-2020-2560.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). (CVSS 4.7, Oracle Siebel UI Framework)
- [CVE-2020-2510](https://cve.now/CVE-2020-2510.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 7.5, Oracle Database)
- [CVE-2020-2511](https://cve.now/CVE-2020-2511.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 7.7, Oracle Database)
- [CVE-2020-2512](https://cve.now/CVE-2020-2512.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 5.9, Oracle Database)
- [CVE-2020-2515](https://cve.now/CVE-2020-2515.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 5.0, Oracle Database)
- [CVE-2020-2516](https://cve.now/CVE-2020-2516.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 2.4, Oracle Database)
- [CVE-2020-2517](https://cve.now/CVE-2020-2517.md): Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. (CVSS 3.3, Oracle Database)
- [CVE-2020-2518](https://cve.now/CVE-2020-2518.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 7.5, Oracle Database)
- [CVE-2020-2519](https://cve.now/CVE-2020-2519.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2527](https://cve.now/CVE-2020-2527.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 4.1, Oracle Database)
- [CVE-2020-2530](https://cve.now/CVE-2020-2530.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 6.1, Oracle HTTP Server)
- [CVE-2020-2531](https://cve.now/CVE-2020-2531.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). (CVSS 3.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2533](https://cve.now/CVE-2020-2533.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 6.1, Oracle Reports Developer)
- [CVE-2020-2534](https://cve.now/CVE-2020-2534.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 6.1, Oracle Reports Developer)
- [CVE-2020-2535](https://cve.now/CVE-2020-2535.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). (CVSS 4.7, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2536](https://cve.now/CVE-2020-2536.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 5.4, Oracle Outside In Technology)
- [CVE-2020-2537](https://cve.now/CVE-2020-2537.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 7.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2538](https://cve.now/CVE-2020-2538.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 7.1, Oracle WebCenter Sites)
- [CVE-2020-2539](https://cve.now/CVE-2020-2539.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 6.1, Oracle WebCenter Sites)
- [CVE-2020-2540](https://cve.now/CVE-2020-2540.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 6.5, Oracle Outside In Technology)
- [CVE-2015-5230](https://cve.now/CVE-2015-5230.md): The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a den (no CVSS, PowerDNS Authoritative Server)
- [CVE-2007-4773](https://cve.now/CVE-2007-4773.md): Systrace before 1.6.0 has insufficient escape policy enforcement. (no CVSS)
- [CVE-2015-5952](https://cve.now/CVE-2015-5952.md): Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item pa (no CVSS)
- [CVE-2019-16467](https://cve.now/CVE-2019-16467.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16468](https://cve.now/CVE-2019-16468.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16469](https://cve.now/CVE-2019-16469.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2019-16466](https://cve.now/CVE-2019-16466.md): Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2005-4891](https://cve.now/CVE-2005-4891.md): Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary S (no CVSS, Simple Machine Forum)
- [CVE-2015-5466](https://cve.now/CVE-2015-5466.md): Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local user (no CVSS)
- [CVE-2015-5484](https://cve.now/CVE-2015-5484.md): Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitra (no CVSS)
- [CVE-2020-2096](https://cve.now/CVE-2020-2096.md): Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build\_now endpoint, resulting in a reflected XSS vulnerabi (no CVSS, Jenkins project Jenkins Gitlab Hook Plugin · org.jenkins-ci…)
- [CVE-2020-2097](https://cve.now/CVE-2020-2097.md): Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall (no CVSS, Jenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…)
- [CVE-2020-2098](https://cve.now/CVE-2020-2098.md): A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the (no CVSS, Jenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…)
- [CVE-2020-2094](https://cve.now/CVE-2020-2094.md): A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to se (no CVSS, Jenkins project Jenkins Health Advisor by CloudBees Plugin…)
- [CVE-2020-2095](https://cve.now/CVE-2020-2095.md): Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master w (no CVSS, Jenkins project Jenkins Redgate SQL Change Automation Plugi…)
- [CVE-2020-2092](https://cve.now/CVE-2020-2092.md): Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing us (no CVSS, Jenkins project Jenkins Robot Framework Plugin · org.jenkin…)
- [CVE-2020-2093](https://cve.now/CVE-2020-2093.md): A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email w (no CVSS, Jenkins project Jenkins Health Advisor by CloudBees Plugin…)
- [CVE-2020-2090](https://cve.now/CVE-2020-2090.md): A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specifie (no CVSS, Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…)
- [CVE-2019-18412](https://cve.now/CVE-2019-18412.md): JetBrains IDETalk plugin before version 193.4099.10 allows XXE (no CVSS)
- [CVE-2015-7874](https://cve.now/CVE-2015-7874.md): Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nick (no CVSS)
- [CVE-2015-7556](https://cve.now/CVE-2015-7556.md): DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program. (no CVSS, National Institute of Advanced Industrial Science and Techn…)
- [CVE-2015-8549](https://cve.now/CVE-2015-8549.md): XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files v (no CVSS, pyamf)
- [CVE-2011-4907](https://cve.now/CVE-2011-4907.md): Joomla! 1.5x through 1.5.12: Missing JEXEC Check (no CVSS, Joomla!)
- [CVE-2011-4336](https://cve.now/CVE-2011-4336.md): Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf\_ajax.php. (no CVSS, Tiki Wiki CMS Groupware)
- [CVE-2012-0070](https://cve.now/CVE-2012-0070.md): spamdyke prior to 4.2.1: STARTTLS reveals plaintext (no CVSS, spamdyke)
- [CVE-2012-1326](https://cve.now/CVE-2012-1326.md): Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which cou (no CVSS, Cisco IronPort Web Security Appliance)
- [CVE-2012-1316](https://cve.now/CVE-2012-1316.md): Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks (no CVSS, Cisco IronPort Web Security Appliance)
- [CVE-2012-1563](https://cve.now/CVE-2012-1563.md): Joomla! before 2.5.3 allows Admin Account Creation. (no CVSS, Joomla!)
- [CVE-2012-1562](https://cve.now/CVE-2012-1562.md): Joomla! core before 2.5.3 allows unauthorized password change. (no CVSS, Joomla! core)
- [CVE-2012-0334](https://cve.now/CVE-2012-0334.md): Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the (no CVSS, Cisco IronPort Web Security Appliance AsyncOS)
- [CVE-2012-0945](https://cve.now/CVE-2012-0945.md): whoopsie-daisy before 0.1.26: Root user can remove arbitrary files (no CVSS, whoopsie-daisy)
- [CVE-2020-1611](https://cve.now/CVE-2020-1611.md): Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device. (CVSS 6.5, Juniper Networks Junos Space)
- [CVE-2020-1609](https://cve.now/CVE-2020-1609.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-1608](https://cve.now/CVE-2020-1608.md): Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1607](https://cve.now/CVE-2020-1607.md): Junos OS: Cross-Site Scripting (XSS) in J-Web (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1606](https://cve.now/CVE-2020-1606.md): Junos OS: Path traversal vulnerability in J-Web (CVSS 5.4, Juniper Networks Junos OS)
- [CVE-2020-1605](https://cve.now/CVE-2020-1605.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-1604](https://cve.now/CVE-2020-1604.md): Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1603](https://cve.now/CVE-2020-1603.md): Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device. (CVSS 8.6, Juniper Networks Junos OS)
- [CVE-2020-1602](https://cve.now/CVE-2020-1602.md): Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process. (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2020-1601](https://cve.now/CVE-2020-1601.md): Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2020-1600](https://cve.now/CVE-2020-1600.md): Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-7058](https://cve.now/CVE-2020-7058.md): data\_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -\> Data Input Methods -\> Unix -\> Pi (no CVSS)
- [CVE-2020-2091](https://cve.now/CVE-2020-2091.md): A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an atta (no CVSS, Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.