CVE-2018-3243

CVE-2018-3243 affects Oracle E-Business Suite OA Framework. Affected versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability allows unauthenticated remote access via HTTP to Oracle Applications Framework, with human interaction required for exploitation, potentially leading to unau...

CVE-2018-3128

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with network access via HTTP to compromise...

CVE-2018-3237

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Support Cart. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2018-3115

CVE-2018-3115 affects Oracle Retail Sales Audit (Operational Insights) in Oracle Retail Applications, with affected versions 15.0 and 16.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle Retail Sales Audit, potentially granting unaut...

CVE-2018-2887

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successf...

CVE-2018-2971

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: REST Services. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2887

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successf...

CVE-2018-3169

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2018-3235

CVE-2018-3235 is a vulnerability in Oracle E-Business Suite’s Oracle Applications Manager (AOM). Affected versions include 12.1.3 and 12.2.3–12.2.7. The issue allows an unauthenticated attacker with network access via HTTP to compromise AOM, with successful attacks potentially granting unauthoriz...

CVE-2018-2889

CVE-2018-2889 affects Oracle MICROS Retail-J (Internal Operations) in Oracle Retail Applications, version 12.1.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Retail-J, potentially gaining unauthorized access to confidential data. The documents show CVSS ...

CVE-2018-2971

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: REST Services. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3237

CVE-2018-3237 affects Oracle E-Business Suite’s Applications Manager (subcomponent Support Cart). Affected versions include 12.1.3 and 12.2.x (12.2.3–12.2.7). The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of data from Oracle Applications Manage...

CVE-2018-3209

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...

CVE-2018-2887

CVE-2018-2887 affects the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Affected versions are 13.0.0 and 12.1.2 . The vulnerability permits an unauthenticated attacker with network access over HTTP to compromise MICROS Retail-J, potentially leading to unauth...

CVE-2018-3166

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: Emergency Response System. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3163

CVE-2018-3163 affects Oracle Hospitality Cruise Fleet Management’s Emergency Response System subcomponent in Oracle Hospitality Applications, affected version 9.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to read a subset of data and potentially cause a p...

CVE-2018-3243

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: None. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component (CNVD-2019-37419)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24266)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...