UBUNTU-CVE-2017-10350

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAX-WS. Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

PT-2017-16018

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 3.3 and 4.3 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks require human...

PT-2017-11255

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 16.0 and 17.0 Description The issue affects the Siebel UI Framework component, specifically the UIF Open UI subcomponent. It allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI...

PT-2017-11319

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console, resulting in a partial denial of service...

PT-2017-11330

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Hotel Mobile version 1.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Hotel Mobile, resulting in unauthorized access to critical data or complete access...

PT-2017-11339

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2017-11355

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle GlassFish Server. Successful attacks require human interaction from a person other...

PT-2017-11359

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise it. Successful attacks require human...

PT-2017-11368

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management, resulting in unauthorized ability to cause...

CVE-2017-10420: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10362: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Sawbridge. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10342: Undefined Security Weakness

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-10427: Undefined Security Weakness

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Point of Sale. Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access...

CVE-2017-10428: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10264: Undefined Security Weakness

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

CVE-2017-3588: Undefined Security Weakness

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: HA for MySQL. Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to...

UBUNTU-CVE-2017-10349

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-10357: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10281: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2017-10355: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker...