Oracle Sun Systems Products Suite Unauthorized Modification Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. A local attacker...

Oracle Primavera Unifier Unauthorized Operation Vulnerability (CNVD-2017-28230)

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Platform subcomponent of the Primavera Unifier component of Oracle...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28399)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

AIX NTP v4 Advisory : ntp_advisory5.asc (IV81129) (IV81130)

The remote AIX host has a version of Network Time Protocol NTP installed that has a vulnerability when ntp is started with the -g option. A remote, unauthenticated attacker could send crafted data to ntp which would enable the time to be changed, enabling further attacks. %NASLMINLEVEL 70300 C...

vCenter Server Appliance - Backup/Restore Recommendations

Native File-Based Backup and Restore Recommended vCenter Server Appliance Data Integrity Best Practices recommends using the native file-based backup and restore operations to protect the vCenter Server Appliance. Review: VMware vSphere User Guide: Considerations and Limitations for File-Based...

CVE-2017-10211

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successf...

CVE-2017-10170

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless/WAP. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

CVE-2017-10085

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

Buffer overflow

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RE...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10002

Oracle Hospitality Inventory Management (Settings and Config) in Oracle Hospitality Applications (versions 8.5.1 and 9.0.0) is affected by CVE-2017-10002. An attacker with low privileges who can access the system over HTTP may compromise data: unauthorized update/insert/delete and unauthorized re...

CVE-2017-10171

CVE-2017-10171 affects Oracle Marketing in Oracle E-Business Suite Home Page across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with HTTP access to compromise Oracle Marketing; attacks require human interaction. Impact can include unauthori...

CVE-2017-10009

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-6757

A vulnerability in Cisco Unified Communications Manager 10.52.10000.5, 11.01.10000.10, and 11.51.10000.6 could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26283)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

Oracle WebLogic Server Remote Vulnerability (CNVD-2017-26393)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Cisco Unified Communications Manager SQL Injection Vulnerability (cisco-sa-20170802-ucm)

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a blind SQL injection attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this...

Oracle Retail Open Commerce Platform Remote Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Framework subcomponent of the Retail Open Commerce Platform component of...

Oracle iSupport Remote Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...