CVE-2017-10339

CVE-2017-10339 affects Oracle Hospitality Suite8 (WebConnect) with affected versions 8.10.1 and 8.10.2. The vulnerability can be exploited by an unauthenticated attacker over HTTP to access Oracle Hospitality Suite8 data. The CVSS 3.0 base score is 5.9 (Confidentiality impact: High, others: none)...

CVE-2017-10034

CVE-2017-10034 affects Oracle BI Publisher (Core Formatting API) in Oracle Fusion Middleware. Affected versions: 11.1.1.7.0 and 11.1.1.9.0. The vulnerability allows unauthenticated, network-accessible exploitation over HTTP, with user interaction required, potentially leading to unauthorized acce...

CVE-2017-10300

Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM subcomponent: Siebel Business Service Issues. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM...

CVE-2017-10300

CVE-2017-10300 affects Oracle Siebel CRM Desktop, subcomponent Siebel Business Service Issues . Affected products/versions: Siebel CRM Desktop 16.0 and 17.0. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, leading to unauthorized read access to a sub...

CVE-2017-10308

CVE-2017-10308 affects the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Affected versions: 9.3.5 and 9.3.6. The vulnerability allows physical access to compromise Oracle Agile PLM, enabling unauthorized update/insert/delete operations and unauthori...

CVE-2017-10381

The CVE targets Oracle PeopleSoft products, specifically PeopleTools PIA Core Technology, versions 8.54–8.56. The vulnerability allows an unauthenticated attacker, over HTTP, with network access to compromise PeopleSoft Enterprise PeopleTools. It requires user interaction for successful exploitat...

CVE-2017-10338

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10014

CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...

CVE-2017-10268

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructur...

CVE-2017-10356

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker wit...

Unspecified Vulnerability in Oracle Common Applications Calendar (CNVD-2017-33681)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Oracle Common Application Calendar CAC, also known as Oracle...

CVE-2017-10268

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructur...

Huawei FusionSphere Authorization Issues Vulnerability

Huawei FusionSphere, a product of Huawei, is a cloud operating system product developed based on the OpenStack framework. Huawei FusionSphere suffers from an authorization issue vulnerability, which can be exploited by an attacker to execute arbitrary commands, which in turn can query, modify, an...

Hijacked Environment Variables

Overview The gruntcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real securi...

CVE-2017-3653

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

CVE-2017-10250

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Tuxedo. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterpri...

CVE-2017-10256

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10251

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Test Framework. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2017-10231

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications subcomponent: AWExport. The supported version that is affected is 2.2.05.062. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2017-10225

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability i...