CVE-2017-3397

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3326

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: Role Summary. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2017-3340

CVE-2017-3340 affects Oracle E-Business Suite, Oracle Marketing (UI) component. Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability enables unauthenticated access over HTTP with network access, requiring some user interaction, potentially leading to...

CVE-2017-3372

Oracle CVE-2017-3372 affects Oracle E-Business Suite’s Interaction Blending (UI subcomponent). Affected versions: 12.1.1–12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to compromise data; exploitation requires user interaction. Impact: unaut...

CVE-2016-5546

CVE-2016-5546 affects OpenJDK/OpenJDK Libraries (Java SE Libraries). Connected documents confirm affected Java versions: Java 6u131, 7u121, 8u112 (and Java SE Embedded 8u111). The issue is described as non-canonical DER encoding of ECSDA signatures, potentially affecting signature validation. Exp...

CVE-2016-8330

Summary of CVE-2016-8330 (Oracle Solaris): A vulnerability in the Solaris kernel (Solaris 11.3) represents a remote, unauthenticated-access issue. An attacker capable of network access via multiple protocols can compromise Solaris, potentially enabling unauthorized update, insertion, or deletion ...

CVE-2017-3338

CVE-2017-3338 affects Oracle E-Business Suite’s Oracle Marketing (UI) component across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability resides in Oracle Marketing and enables an unauthenticated, network-accessible attacker to compromise Marketing via HTTP. A...

CVE-2017-3271

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters . Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-3380

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3383

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3357

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-3330

CVE-2017-3330 affects Oracle Siebel CRM 16.1 Open UI (Siebel UI Framework). The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Siebel UI Framework. Successful attacks require user interaction and may lead to unauthorized access to critical data or to up...

CVE-2017-3440

CVE-2017-3440 affects Oracle E-Business Suite, Oracle Customer Interaction History UI in versions 12.1.1–12.1.3. The vulnerability is exploitable over HTTP with network access, with unauthenticated access and required user interaction to complete exploitation, potentially leading to unauthorized ...

CVE-2017-3402

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3362

CVE-2017-3362 affects Oracle E-Business Suite Knowledge Management (User Interface) in 12.1.1–12.1.3. The vulnerability allows an unauthenticated, network-accessible attacker to compromise Knowledge Management via HTTP, with human interaction required for exploitation; attacks may impact addition...

CVE-2017-3325

Oracle Siebel CRM 16.1.x is affected by CVE-2017-3325 in the Siebel UI Framework (subcomponent: EAI). The connected NASL/Tenable entry confirms additional related issues (CVE-2017-3330 and CVE-2017-3264) within the same CPU advisory. The vulnerability allows an unauthenticated attacker to access ...

CVE-2017-3389

CVE-2017-3389 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony User Interface in versions 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony; exploitation requires human interaction. ...

CVE-2017-3327

CVE-2017-3327 affects Oracle E-Business Suite (Oracle Common Applications, Resources Module). Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability resides in Oracle Common Applications and is exploitable via HTTP by an unauthenticated attacker over t...

FTC: D-Link Failed to Secure Routers, IP Cameras

The Federal Trade Commission acknowledged on Thursday that it takes the security of the so-called internet of things seriously when it leveraged a complaint against one of the more popular router manufacturers. The lawsuit, filed at the U.S. District Court for the Northern District of California,...

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...