CVE-2018-3066

CVE-2018-3066 affects the MySQL Server component (subcomponent: Server: Options) and is disclosed across multiple advisories. Affected versions include 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability is described as difficult to exploit, requiring network access ...

CVE-2018-3095

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3020

CVE-2018-3020 affects Oracle Banking Payments (Oracle Financial Services Applications), specifically the Payments Core subcomponent. Affected versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The vulnerability is described as easily exploitable with network access over HTTP by a low-privile...

CVE-2018-2966

CVE-2018-2966 affects Oracle Primavera Unifier (Core) within Oracle Construction and Engineering Suite. Affected releases are Primavera Unifier 16.x, 17.x, and 18.x. The vulnerability is exploitable over HTTP and can be triggered by an unauthenticated attacker with network access; exploitation re...

CVE-2018-2935

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JSF. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2018-3001

CVE-2018-3001 affects Oracle Hospitality Applications’ Hospitality Cruise Shipboard Property Management System (SPMS Suite), with the SPMS component in the 8.x line. The connected CNVD entry characterizes the flaw as an access control error that could let an attacker gain unauthorized access to d...

CVE-2018-2997

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite subcomponent: Script Author. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting...

CVE-2018-2932

CVE-2018-2932 affects Oracle Sun Systems Products Suite – SuperCluster Specific Software (subcomponent: SuperCluster Virtual Assistant). Affected versions are prior to 2.5.0. The vulnerability permits an unauthenticated attacker with network access via multiple protocols to compromise Oracle Supe...

CVE-2018-3009

CVE-2018-3009 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware; the IBM and CVE records indicate the affected product area is Outside In Technology version 8.5.3. The vulnerability is described as unauthenticated remote access via HTTP with network access...

CVE-2018-2767

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2018-3099

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3064

Disclaimer: This data contains information about vulnerable...

CVE-2018-2967

The CVE-2018-2967 entry concerns Oracle Primavera Unifier (Core) and affects the Primavera Unifier software in versions 16.x, 17.x and 18.x. The connected Nessus entry corroborates that installations running on the remote web server with 16.x (before 16.2.15.0), 17.x (before 17.12.7.0), or 18.x (...

CVE-2018-3008

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

CVE-2018-3100

CVE-2018-3100 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Process Analysis & Discovery) with affected versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessing attacker via HTTP to perfor...

CVE-2018-3018

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2018-3094

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2925

CVE-2018-2925 affects Oracle Fusion Middleware BI Publisher Web Server component. Affected are BI Publisher versions: 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0, and 12.2.1.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise BI Publisher and obtain unauthori...

CVE-2018-2907

Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion subcomponent: Security Models. The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Financial Reporting...

CVE-2018-3103

CVE-2018-3103 affects the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected version: Outside In Technology 8.5.3; vulnerability allows an unauthenticated attacker with network access via HTTP to access data and potentially cause partial DOS. IBM/Oracle a...