# CVEs published 2020-07-15

278 CVEs were published on July 15, 2020: 16 critical, 70 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-10287](https://cve.now/CVE-2020-10287.md): RVD#3326: Hardcoded default credentials on IRC 5 OPC Server (CVSS 9.1, ABB IRB140)
- [CVE-2020-10288](https://cve.now/CVE-2020-10288.md): RVD#3327: No authentication required for accesing ABB IRC5 FTP server (CVSS 9.8, ABB IRB140)
- [CVE-2019-20908](https://cve.now/CVE-2019-20908.md): An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. (no CVSS)
- [CVE-2020-15780](https://cve.now/CVE-2020-15780.md): An issue was discovered in drivers/acpi/acpi\_configfs.c in the Linux kernel before 5.7.7. (no CVSS)
- [CVE-2020-15107](https://cve.now/CVE-2020-15107.md): x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave (CVSS 5.3, openenclave)
- [CVE-2019-17639](https://cve.now/CVE-2019-17639.md): In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the (no CVSS, The Eclipse Foundation Eclipse OpenJ9)
- [CVE-2020-10286](https://cve.now/CVE-2020-10286.md): RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS (CVSS 9.4, uFactory xArm 5 Lite, xArm 6 and xArm)
- [CVE-2020-9311](https://cve.now/CVE-2020-9311.md): In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which ca (no CVSS, silverstripe/cms · silverstripe/framework)
- [CVE-2020-10285](https://cve.now/CVE-2020-10285.md): RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks (CVSS 9.4, uFactory xArm5 Lite, xArm 6 and xArm)
- [CVE-2020-9309](https://cve.now/CVE-2020-9309.md): Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for exampl (no CVSS, silverstripe/cms)
- [CVE-2020-15779](https://cve.now/CVE-2020-15779.md): A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. (no CVSS, socket.io-file)
- [CVE-2020-6164](https://cve.now/CVE-2020-6164.md): In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose t (no CVSS, silverstripe/cms · silverstripe/framework)
- [CVE-2020-6165](https://cve.now/CVE-2020-6165.md): SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. (no CVSS, silverstripe/recipe-cms · silverstripe/graphql)
- [CVE-2020-8958](https://cve.now/CVE-2020-8958.md): Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to (no CVSS)
- [CVE-2020-14982](https://cve.now/CVE-2020-14982.md): A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's (no CVSS)
- [CVE-2020-13788](https://cve.now/CVE-2020-13788.md): Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on (no CVSS, github.com/goharbor/harbor)
- [CVE-2020-15051](https://cve.now/CVE-2020-15051.md): An issue was discovered in Artica Proxy before 4.30.000000. (no CVSS)
- [CVE-2020-11438](https://cve.now/CVE-2020-11438.md): LibreHealth EMR v2.0.0 is affected by systemic CSRF. (no CVSS)
- [CVE-2020-11436](https://cve.now/CVE-2020-11436.md): LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including admini (no CVSS)
- [CVE-2020-11437](https://cve.now/CVE-2020-11437.md): LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database. (no CVSS)
- [CVE-2020-10284](https://cve.now/CVE-2020-10284.md): RVD#3321: No Authentication required to exert manual control of the robot (CVSS 9.1, uFactory xArm5 Lite, xArm 6 and xArm)
- [CVE-2020-11439](https://cve.now/CVE-2020-11439.md): LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR applica (no CVSS)
- [CVE-2020-15603](https://cve.now/CVE-2020-15603.md): An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow (no CVSS, Trend Micro Security)
- [CVE-2020-15602](https://cve.now/CVE-2020-15602.md): An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family (no CVSS, Trend Micro Security)
- [CVE-2020-15366](https://cve.now/CVE-2020-15366.md): An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. (no CVSS, ajv)
- [CVE-2020-14066](https://cve.now/CVE-2020-14066.md): IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access. (no CVSS)
- [CVE-2020-14065](https://cve.now/CVE-2020-14065.md): IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. (no CVSS)
- [CVE-2020-14064](https://cve.now/CVE-2020-14064.md): IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts. (no CVSS)
- [CVE-2020-12684](https://cve.now/CVE-2020-12684.md): XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input contai (no CVSS)
- [CVE-2020-12854](https://cve.now/CVE-2020-12854.md): A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. (no CVSS)
- [CVE-2020-15718](https://cve.now/CVE-2020-15718.md): RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. (no CVSS)
- [CVE-2020-15717](https://cve.now/CVE-2020-15717.md): RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. (no CVSS)
- [CVE-2020-15716](https://cve.now/CVE-2020-15716.md): RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. (no CVSS)
- [CVE-2019-19326](https://cve.now/CVE-2019-19326.md): Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulne (no CVSS, silverstripe/framework)
- [CVE-2020-2983](https://cve.now/CVE-2020-2983.md): Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). (CVSS 7.1, Oracle Data Masking and Subsetting)
- [CVE-2020-2984](https://cve.now/CVE-2020-2984.md): Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). (CVSS 7.1, Oracle Configuration Manager)
- [CVE-2020-14724](https://cve.now/CVE-2020-14724.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). (CVSS 7.3, Oracle Solaris Operating System)
- [CVE-2020-2513](https://cve.now/CVE-2020-2513.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2562](https://cve.now/CVE-2020-2562.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). (CVSS 6.1, Oracle Primavera Portfolio Management)
- [CVE-2020-2966](https://cve.now/CVE-2020-2966.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 5.4, Oracle WebLogic Server)
- [CVE-2020-2967](https://cve.now/CVE-2020-2967.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-2968](https://cve.now/CVE-2020-2968.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 8.0, Oracle Database)
- [CVE-2020-2969](https://cve.now/CVE-2020-2969.md): Vulnerability in the Data Pump component of Oracle Database Server. (CVSS 6.6, Oracle Database)
- [CVE-2020-2971](https://cve.now/CVE-2020-2971.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2972](https://cve.now/CVE-2020-2972.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2973](https://cve.now/CVE-2020-2973.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2974](https://cve.now/CVE-2020-2974.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2975](https://cve.now/CVE-2020-2975.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2976](https://cve.now/CVE-2020-2976.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-2977](https://cve.now/CVE-2020-2977.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 4.6, Oracle Application Express)
- [CVE-2020-2981](https://cve.now/CVE-2020-2981.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (CVSS 7.0, Oracle Berkeley DB)
- [CVE-2020-2982](https://cve.now/CVE-2020-2982.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 7.1, Oracle Enterprise Manager Base Platform)
- [CVE-2020-14706](https://cve.now/CVE-2020-14706.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 5.9, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-14707](https://cve.now/CVE-2020-14707.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.0, Oracle VM VirtualBox)
- [CVE-2020-14708](https://cve.now/CVE-2020-14708.md): Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). (CVSS 4.3, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-14709](https://cve.now/CVE-2020-14709.md): Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Card). (CVSS 7.1, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-14710](https://cve.now/CVE-2020-14710.md): Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). (CVSS 5.4, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-14711](https://cve.now/CVE-2020-14711.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-14712](https://cve.now/CVE-2020-14712.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.0, Oracle VM VirtualBox)
- [CVE-2020-14713](https://cve.now/CVE-2020-14713.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14714](https://cve.now/CVE-2020-14714.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2020-14715](https://cve.now/CVE-2020-14715.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2020-14716](https://cve.now/CVE-2020-14716.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). (CVSS 4.7, Oracle Common Applications)
- [CVE-2020-14717](https://cve.now/CVE-2020-14717.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). (CVSS 4.7, Oracle Common Applications)
- [CVE-2020-14718](https://cve.now/CVE-2020-14718.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). (CVSS 7.2, Oracle GraalVM Enterprise Edition)
- [CVE-2020-14719](https://cve.now/CVE-2020-14719.md): Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). (CVSS 7.7, Oracle Internet Expenses)
- [CVE-2020-14720](https://cve.now/CVE-2020-14720.md): Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). (CVSS 7.7, Oracle Internet Expenses)
- [CVE-2020-14721](https://cve.now/CVE-2020-14721.md): Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). (CVSS 6.3, Oracle Enterprise Communications Broker)
- [CVE-2020-14722](https://cve.now/CVE-2020-14722.md): Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). (CVSS 5.8, Oracle Enterprise Communications Broker)
- [CVE-2020-14723](https://cve.now/CVE-2020-14723.md): Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). (CVSS 8.2, Oracle Help Technologies)
- [CVE-2020-14686](https://cve.now/CVE-2020-14686.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-14687](https://cve.now/CVE-2020-14687.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14688](https://cve.now/CVE-2020-14688.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). (CVSS 8.2, Oracle Common Applications)
- [CVE-2020-14690](https://cve.now/CVE-2020-14690.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14691](https://cve.now/CVE-2020-14691.md): Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User (CVSS 7.1, Oracle Financial Services Liquidity Risk Management)
- [CVE-2020-14692](https://cve.now/CVE-2020-14692.md): Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (com (CVSS 6.5, Oracle Financial Services Loan Loss Forecasting and Provisi…)
- [CVE-2020-14693](https://cve.now/CVE-2020-14693.md): Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). (CVSS 6.5, Oracle Insurance Accounting Analyzer)
- [CVE-2020-14694](https://cve.now/CVE-2020-14694.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14695](https://cve.now/CVE-2020-14695.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14696](https://cve.now/CVE-2020-14696.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates). (CVSS 7.2, Oracle BI Publisher)
- [CVE-2020-14697](https://cve.now/CVE-2020-14697.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 7.2, Oracle MySQL Server)
- [CVE-2020-14698](https://cve.now/CVE-2020-14698.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14699](https://cve.now/CVE-2020-14699.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14700](https://cve.now/CVE-2020-14700.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14701](https://cve.now/CVE-2020-14701.md): Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface). (CVSS 10.0, Oracle SD-WAN Aware)
- [CVE-2020-14702](https://cve.now/CVE-2020-14702.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14703](https://cve.now/CVE-2020-14703.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14704](https://cve.now/CVE-2020-14704.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14705](https://cve.now/CVE-2020-14705.md): Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management). (CVSS 9.6, Oracle GoldenGate)
- [CVE-2020-14666](https://cve.now/CVE-2020-14666.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-14667](https://cve.now/CVE-2020-14667.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 7.6, Oracle CRM Technical Foundation)
- [CVE-2020-14668](https://cve.now/CVE-2020-14668.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-14669](https://cve.now/CVE-2020-14669.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). (CVSS 8.2, Oracle Configurator)
- [CVE-2020-14670](https://cve.now/CVE-2020-14670.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Settings). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-14671](https://cve.now/CVE-2020-14671.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-14673](https://cve.now/CVE-2020-14673.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14674](https://cve.now/CVE-2020-14674.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14675](https://cve.now/CVE-2020-14675.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14676](https://cve.now/CVE-2020-14676.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14677](https://cve.now/CVE-2020-14677.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14678](https://cve.now/CVE-2020-14678.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 7.2, Oracle MySQL Server)
- [CVE-2020-14679](https://cve.now/CVE-2020-14679.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 7.5, Oracle CRM Technical Foundation)
- [CVE-2020-14680](https://cve.now/CVE-2020-14680.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14681](https://cve.now/CVE-2020-14681.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-14682](https://cve.now/CVE-2020-14682.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-14684](https://cve.now/CVE-2020-14684.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 4.3, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14685](https://cve.now/CVE-2020-14685.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.5, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14648](https://cve.now/CVE-2020-14648.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14649](https://cve.now/CVE-2020-14649.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14650](https://cve.now/CVE-2020-14650.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2020-14651](https://cve.now/CVE-2020-14651.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2020-14652](https://cve.now/CVE-2020-14652.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server)
- [CVE-2020-14653](https://cve.now/CVE-2020-14653.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 5.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-14654](https://cve.now/CVE-2020-14654.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14655](https://cve.now/CVE-2020-14655.md): Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API). (CVSS 6.5, Oracle Security Service)
- [CVE-2020-14656](https://cve.now/CVE-2020-14656.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14657](https://cve.now/CVE-2020-14657.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 7.6, Oracle CRM Technical Foundation)
- [CVE-2020-14658](https://cve.now/CVE-2020-14658.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 9.1, Oracle Marketing)
- [CVE-2020-14659](https://cve.now/CVE-2020-14659.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-14660](https://cve.now/CVE-2020-14660.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-14661](https://cve.now/CVE-2020-14661.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-14662](https://cve.now/CVE-2020-14662.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.3, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14663](https://cve.now/CVE-2020-14663.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 7.2, Oracle MySQL Server)
- [CVE-2020-14664](https://cve.now/CVE-2020-14664.md): Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). (CVSS 8.3, Oracle Java)
- [CVE-2020-14665](https://cve.now/CVE-2020-14665.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice). (CVSS 9.1, Oracle Trade Management)
- [CVE-2020-14629](https://cve.now/CVE-2020-14629.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14630](https://cve.now/CVE-2020-14630.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload). (CVSS 7.5, Oracle Enterprise Session Border Controller)
- [CVE-2020-14631](https://cve.now/CVE-2020-14631.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Audit). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14632](https://cve.now/CVE-2020-14632.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14633](https://cve.now/CVE-2020-14633.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2020-14634](https://cve.now/CVE-2020-14634.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2020-14635](https://cve.now/CVE-2020-14635.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging). (CVSS 5.3, Oracle Application Object Library)
- [CVE-2020-14636](https://cve.now/CVE-2020-14636.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-14637](https://cve.now/CVE-2020-14637.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-14638](https://cve.now/CVE-2020-14638.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-14639](https://cve.now/CVE-2020-14639.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-14640](https://cve.now/CVE-2020-14640.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-14641](https://cve.now/CVE-2020-14641.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14642](https://cve.now/CVE-2020-14642.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore). (CVSS 7.5, Oracle Coherence)
- [CVE-2020-14643](https://cve.now/CVE-2020-14643.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2020-14644](https://cve.now/CVE-2020-14644.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-14645](https://cve.now/CVE-2020-14645.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14646](https://cve.now/CVE-2020-14646.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14647](https://cve.now/CVE-2020-14647.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-14610](https://cve.now/CVE-2020-14610.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 7.6, Oracle Applications Framework)
- [CVE-2020-14611](https://cve.now/CVE-2020-14611.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 8.6, Oracle WebCenter Portal)
- [CVE-2020-14612](https://cve.now/CVE-2020-14612.md): Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Time and Labor). (CVSS 5.4, Oracle PeopleSoft Enterprise HCM Time and Labor)
- [CVE-2020-14613](https://cve.now/CVE-2020-14613.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced User Interface). (CVSS 6.1, Oracle WebCenter Sites)
- [CVE-2020-14614](https://cve.now/CVE-2020-14614.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14615](https://cve.now/CVE-2020-14615.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14616](https://cve.now/CVE-2020-14616.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). (CVSS 2.7, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-14617](https://cve.now/CVE-2020-14617.md): Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). (CVSS 5.7, Oracle Primavera Unifier)
- [CVE-2020-14618](https://cve.now/CVE-2020-14618.md): Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Mobile App). (CVSS 5.9, Oracle Primavera Unifier)
- [CVE-2020-14619](https://cve.now/CVE-2020-14619.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14620](https://cve.now/CVE-2020-14620.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14621](https://cve.now/CVE-2020-14621.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java)
- [CVE-2020-14622](https://cve.now/CVE-2020-14622.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 4.9, Oracle WebLogic Server)
- [CVE-2020-14623](https://cve.now/CVE-2020-14623.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14624](https://cve.now/CVE-2020-14624.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14625](https://cve.now/CVE-2020-14625.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14626](https://cve.now/CVE-2020-14626.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 8.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14627](https://cve.now/CVE-2020-14627.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14628](https://cve.now/CVE-2020-14628.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-14591](https://cve.now/CVE-2020-14591.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14592](https://cve.now/CVE-2020-14592.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14593](https://cve.now/CVE-2020-14593.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). (CVSS 7.4, Oracle Java)
- [CVE-2020-14594](https://cve.now/CVE-2020-14594.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Inventory Integ (CVSS 6.5, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-14595](https://cve.now/CVE-2020-14595.md): Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). (CVSS 8.2, Oracle iLearning)
- [CVE-2020-14596](https://cve.now/CVE-2020-14596.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Address Book). (CVSS 8.2, Oracle iStore)
- [CVE-2020-14597](https://cve.now/CVE-2020-14597.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14598](https://cve.now/CVE-2020-14598.md): Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). (CVSS 9.1, Oracle CRM Gateway for Mobile Devices)
- [CVE-2020-14599](https://cve.now/CVE-2020-14599.md): Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). (CVSS 9.1, Oracle CRM Gateway for Mobile Devices)
- [CVE-2020-14600](https://cve.now/CVE-2020-14600.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 4.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14601](https://cve.now/CVE-2020-14601.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14602](https://cve.now/CVE-2020-14602.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 7.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14603](https://cve.now/CVE-2020-14603.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 5.3, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14604](https://cve.now/CVE-2020-14604.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 5.3, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14605](https://cve.now/CVE-2020-14605.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 6.5, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14606](https://cve.now/CVE-2020-14606.md): Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). (CVSS 10.0, Oracle SD-WAN Edge)
- [CVE-2020-14607](https://cve.now/CVE-2020-14607.md): Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server). (CVSS 6.1, Oracle Fusion Middleware MapViewer)
- [CVE-2020-14608](https://cve.now/CVE-2020-14608.md): Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server). (CVSS 8.2, Oracle Fusion Middleware MapViewer)
- [CVE-2020-14609](https://cve.now/CVE-2020-14609.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Answers). (CVSS 8.6, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14573](https://cve.now/CVE-2020-14573.md): Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). (CVSS 3.7, Oracle Java)
- [CVE-2020-14574](https://cve.now/CVE-2020-14574.md): Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications (component: FACE). (CVSS 4.7, Oracle Communications Interactive Session Recorder)
- [CVE-2020-14575](https://cve.now/CVE-2020-14575.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14576](https://cve.now/CVE-2020-14576.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14577](https://cve.now/CVE-2020-14577.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java)
- [CVE-2020-14578](https://cve.now/CVE-2020-14578.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java)
- [CVE-2020-14579](https://cve.now/CVE-2020-14579.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java)
- [CVE-2020-14580](https://cve.now/CVE-2020-14580.md): Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (component: System Admin) (CVSS 8.2, Oracle Communications Session Border Controller)
- [CVE-2020-14581](https://cve.now/CVE-2020-14581.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). (CVSS 3.7, Oracle Java)
- [CVE-2020-14582](https://cve.now/CVE-2020-14582.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration). (CVSS 8.2, Oracle iStore)
- [CVE-2020-14583](https://cve.now/CVE-2020-14583.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2020-14584](https://cve.now/CVE-2020-14584.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 8.2, Oracle BI Publisher)
- [CVE-2020-14585](https://cve.now/CVE-2020-14585.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). (CVSS 8.2, Oracle BI Publisher)
- [CVE-2020-14586](https://cve.now/CVE-2020-14586.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14587](https://cve.now/CVE-2020-14587.md): Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). (CVSS 5.4, Oracle PeopleSoft Enterprise FIN Expenses)
- [CVE-2020-14588](https://cve.now/CVE-2020-14588.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 8.2, Oracle WebLogic Server)
- [CVE-2020-14589](https://cve.now/CVE-2020-14589.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-14590](https://cve.now/CVE-2020-14590.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Page Request). (CVSS 2.7, Oracle Applications Framework)
- [CVE-2020-14554](https://cve.now/CVE-2020-14554.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). (CVSS 4.7, Oracle Application Object Library)
- [CVE-2020-14555](https://cve.now/CVE-2020-14555.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 4.7, Oracle Marketing)
- [CVE-2020-14556](https://cve.now/CVE-2020-14556.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 4.8, Oracle Java)
- [CVE-2020-14557](https://cve.now/CVE-2020-14557.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 6.8, Oracle WebLogic Server)
- [CVE-2020-14558](https://cve.now/CVE-2020-14558.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14559](https://cve.now/CVE-2020-14559.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2020-14560](https://cve.now/CVE-2020-14560.md): Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). (CVSS 4.2, Oracle Hyperion BI+)
- [CVE-2020-14561](https://cve.now/CVE-2020-14561.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). (CVSS 7.3, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-14562](https://cve.now/CVE-2020-14562.md): Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java)
- [CVE-2020-14563](https://cve.now/CVE-2020-14563.md): Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI). (CVSS 6.1, Oracle Enterprise Communications Broker)
- [CVE-2020-14564](https://cve.now/CVE-2020-14564.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console). (CVSS 2.7, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14565](https://cve.now/CVE-2020-14565.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Security). (CVSS 8.1, Oracle Unified Directory)
- [CVE-2020-14566](https://cve.now/CVE-2020-14566.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.3, Oracle Primavera Portfolio Management)
- [CVE-2020-14567](https://cve.now/CVE-2020-14567.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14568](https://cve.now/CVE-2020-14568.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14569](https://cve.now/CVE-2020-14569.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 8.1, Oracle FLEXCUBE Investor Servicing)
- [CVE-2020-14570](https://cve.now/CVE-2020-14570.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). (CVSS 7.1, Oracle BI Publisher)
- [CVE-2020-14571](https://cve.now/CVE-2020-14571.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). (CVSS 7.2, Oracle BI Publisher)
- [CVE-2020-14572](https://cve.now/CVE-2020-14572.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-14534](https://cve.now/CVE-2020-14534.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). (CVSS 8.2, Oracle Project Planning and Control)
- [CVE-2020-14535](https://cve.now/CVE-2020-14535.md): Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). (CVSS 7.4, Oracle Commerce Platform)
- [CVE-2020-14536](https://cve.now/CVE-2020-14536.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). (CVSS 7.4, Commerce Guided Search / Oracle Commerce Experience Manager)
- [CVE-2020-14537](https://cve.now/CVE-2020-14537.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). (CVSS 5.5, Oracle Solaris Operating System)
- [CVE-2020-14539](https://cve.now/CVE-2020-14539.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14540](https://cve.now/CVE-2020-14540.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14541](https://cve.now/CVE-2020-14541.md): Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). (CVSS 2.0, Oracle Hyperion Financial Close Management)
- [CVE-2020-14542](https://cve.now/CVE-2020-14542.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: libsuri). (CVSS 3.3, Oracle Solaris Operating System)
- [CVE-2020-14543](https://cve.now/CVE-2020-14543.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). (CVSS 7.3, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-14544](https://cve.now/CVE-2020-14544.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security). (CVSS 4.3, Oracle Transportation Management)
- [CVE-2020-14545](https://cve.now/CVE-2020-14545.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). (CVSS 5.0, Oracle Solaris Operating System)
- [CVE-2020-14546](https://cve.now/CVE-2020-14546.md): Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). (CVSS 4.2, Oracle Hyperion Financial Close Management)
- [CVE-2020-14547](https://cve.now/CVE-2020-14547.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14548](https://cve.now/CVE-2020-14548.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 3.4, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14549](https://cve.now/CVE-2020-14549.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Server). (CVSS 5.9, Oracle Primavera Portfolio Management)
- [CVE-2020-14550](https://cve.now/CVE-2020-14550.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2020-14551](https://cve.now/CVE-2020-14551.md): Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). (CVSS 4.3, Oracle AutoVue 3D Professional Advanced)
- [CVE-2020-14552](https://cve.now/CVE-2020-14552.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). (CVSS 6.8, Oracle WebCenter Portal)
- [CVE-2020-14553](https://cve.now/CVE-2020-14553.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2020-14527](https://cve.now/CVE-2020-14527.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 5.9, Oracle Primavera Portfolio Management)
- [CVE-2020-14528](https://cve.now/CVE-2020-14528.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 6.1, Oracle Primavera Portfolio Management)
- [CVE-2020-14529](https://cve.now/CVE-2020-14529.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). (CVSS 5.4, Oracle Primavera Portfolio Management)
- [CVE-2020-14530](https://cve.now/CVE-2020-14530.md): Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). (CVSS 5.9, Oracle Security Service)
- [CVE-2020-14531](https://cve.now/CVE-2020-14531.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). (CVSS 5.9, Oracle Siebel UI Framework)
- [CVE-2020-14532](https://cve.now/CVE-2020-14532.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 4.7, Oracle Commerce Platform)
- [CVE-2020-14533](https://cve.now/CVE-2020-14533.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 3.5, Oracle Commerce Platform)
- [CVE-2020-15117](https://cve.now/CVE-2020-15117.md): Denial of Service in Synergy (CVSS 6.5, symless synergy-core)
- [CVE-2020-2227](https://cve.now/CVE-2020-2227.md): Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site (no CVSS, Jenkins project Jenkins Deployer Framework Plugin · org.jen…)
- [CVE-2020-2228](https://cve.now/CVE-2020-2228.md): Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalati (no CVSS, Jenkins project Jenkins Gitlab Authentication Plugin · org.…)
- [CVE-2020-2225](https://cve.now/CVE-2020-2225.md): Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple (no CVSS, Jenkins project Jenkins Matrix Project Plugin · org.jenkins…)
- [CVE-2020-2226](https://cve.now/CVE-2020-2226.md): Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored (no CVSS, Jenkins project Jenkins Matrix Authorization Strategy Plugi…)
- [CVE-2020-2223](https://cve.now/CVE-2020-2223.md): Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in t (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2020-2224](https://cve.now/CVE-2020-2224.md): Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single (no CVSS, Jenkins project Jenkins Matrix Project Plugin · org.jenkins…)
- [CVE-2020-2220](https://cve.now/CVE-2020-2220.md): Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross- (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2020-2221](https://cve.now/CVE-2020-2221.md): Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2020-2222](https://cve.now/CVE-2020-2222.md): Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2020-8178](https://cve.now/CVE-2020-8178.md): Insufficient input validation in npm package \`jison\` \<= 0.4.18 may lead to OS command injection attacks. (no CVSS, jison)
- [CVE-2020-8203](https://cve.now/CVE-2020-8203.md): Prototype pollution attack when using \_.zipObjectDeep in lodash before 4.17.20. (no CVSS, lodash · lodash-es +6)
- [CVE-2020-15572](https://cve.now/CVE-2020-15572.md): Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to u (no CVSS)
- [CVE-2020-15700](https://cve.now/CVE-2020-15700.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-15699](https://cve.now/CVE-2020-15699.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-15698](https://cve.now/CVE-2020-15698.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-15697](https://cve.now/CVE-2020-15697.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-15696](https://cve.now/CVE-2020-15696.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-15695](https://cve.now/CVE-2020-15695.md): An issue was discovered in Joomla! through 3.9.19. (no CVSS)
- [CVE-2020-9496](https://cve.now/CVE-2020-9496.md): XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 (no CVSS, Apache OFBiz)
- [CVE-2020-13923](https://cve.now/CVE-2020-13923.md): IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04 (no CVSS, Apache OFBiz)
- [CVE-2019-17637](https://cve.now/CVE-2019-17637.md): In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be expl (no CVSS, The Eclipse Foundation Eclipse Web Tools Platform)
- [CVE-2020-7292](https://cve.now/CVE-2020-7292.md): Web Gateway (MWG) - Inappropriate Encoding for output context (CVSS 4.3, McAfee Web Gateway)
- [CVE-2020-4100](https://cve.now/CVE-2020-4100.md): "HCL Verse for Android was found to employ dynamic code loading. (no CVSS, "HCL Verse for Android")
- [CVE-2020-14511](https://cve.now/CVE-2020-14511.md): Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and E (no CVSS, EDR-G902 and EDR-G903 Series Routers)
- [CVE-2020-5765](https://cve.now/CVE-2020-5765.md): Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration. (no CVSS, Tenable Nessus)
- [CVE-2020-14501](https://cve.now/CVE-2020-14501.md): Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. (no CVSS, Advantech iView)
- [CVE-2020-14503](https://cve.now/CVE-2020-14503.md): Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. (no CVSS, Advantech iView)
- [CVE-2020-14499](https://cve.now/CVE-2020-14499.md): Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. (no CVSS, Advantech iView)
- [CVE-2020-14505](https://cve.now/CVE-2020-14505.md): Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerab (no CVSS, Advantech iView)
- [CVE-2020-14497](https://cve.now/CVE-2020-14497.md): Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-contr (no CVSS, Advantech iView)
- [CVE-2020-14507](https://cve.now/CVE-2020-14507.md): Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/dow (no CVSS, Advantech iView)
- [CVE-2020-2978](https://cve.now/CVE-2020-2978.md): Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. (CVSS 4.1, Oracle Database)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-07-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.