CVE-2017-10056

Affected product: Oracle Hospitality 9700, subcomponent Property Management Systems, version 4.0. Vulnerability allows a low-privilege, logged-on attacker to compromise Oracle Hospitality 9700, potentially leading to unauthorized access to data or complete access to all data. CVSS v3.0 base score...

CVE-2017-10130

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Management. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-10160

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

CVE-2017-10047

Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications subcomponent: Interface. The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful...

CVE-2017-10199

Vulnerability in the Oracle iLearning component of Oracle iLearning subcomponent: Learner Pages. The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks require...

CVE-2017-10179

CVE-2017-10179 describes a vulnerability in the Oracle E-Business Suite "Application Management Pack" (AMP) for the User Monitoring subcomponent. Affected AMP versions are 12.1.0.4.0 and 13.1.1.1.0. The issue allows an unauthenticated, network-accessible attacker (via HTTP) to compromise AMP data...

CVE-2017-10049

CVE-2017-10049 describes a vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Affected versions are 16.0 and 17.0. The issue allows an unauthenticated attacker who can reach the system over HTTP to compromise Siebel Core CRM. Attacks require human interact...

CVE-2017-10029

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10112

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-10182

The CVE-2017-10182 issue affects Oracle Hospitality OPERA 5 Property Services, specifically the OPERA Export Functionality subcomponent. Affected versions are 5.4.0.x, 5.4.1.x and 5.4.3.x. The vulnerability could be exploited by a high-privilege attacker with network access via HTTP to gain unaut...

CVE-2017-10085

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

CVE-2017-10176

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3652

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

Avaya Radvision SCOPIA Desktop SQL Injection Vulnerability

Avaya Radvision SCOPIA Desktop is a high-definition desktop video software. Avaya Radvision SCOPIA Desktop suffers from a SQL injection vulnerability that originates from the program's failure to adequately validate user-supplied data prior to its utility in a SQL query. An attacker could use thi...

Arbitrary file deletion

DISPUTED Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or wh...

Oracle MySQL Server Remote Vulnerability (CNVD-2017-06395)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Client mysqldump subcomponent of the MySQL Server component in Oracle MySQL. An attacker could exploit th...

Design/Logic Flaw

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

CVE-2017-3345

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

CVE-2017-3607

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3601

Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware subcomponent: Oracle API Gateway. The supported version that is affected is 11.1.2.4.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle API Gateway...