4606 matches found
CVE-2018-2742
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Framework. Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Design/Logic Flaw
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
Buffer overflow
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. The supported version that is affected is 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. While the vulnerability is in Oracle GoldenGate...
Design/Logic Flaw
Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...
Code injection
Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
Design/Logic Flaw
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Logging. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library. Successful attacks require...
Design/Logic Flaw
Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware subcomponent: Oracle SSL API. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...
Buffer overflow
Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2018-2793
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PsAdmin. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft...
CVE-2018-2802
CVE-2018-2802 affects Oracle Hospitality Simphony’s Client Application Loader. The vulnerability exists in supported versions 2.8 and 2.9 and can be exploited by a low-privilege attacker with network access via HTTP, leading to unauthorized update/insert/delete and read access to Oracle Hospitali...
CVE-2018-2832
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. The supported version that is affected is 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. While the vulnerability is in Oracle GoldenGate...
CVE-2018-2864
CVE-2018-2864 affects Oracle E-Business Suite, specifically the Oracle Application Object Library diagnostics component. Affected versions are 12.1.3 and 12.2.3–12.2.7. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to read a subset of Oracle Application Object ...
CVE-2018-2870
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2748
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
CVE-2018-2800
CVE-2018-2800 affects Oracle Java SE/JRockit (RMI) and is reflected in multiple public advisories. Affected Java SE: 6u181, 7u171, 8u162; JRockit: R28.3.17. The vulnerability involves the Java SE JRockit RMI component and can allow an unauthenticated network-access attacker to compromise data via...
CVE-2018-2856
CVE-2018-2856 affects Oracle Financial Services Applications Basel Regulatory Capital Internal Ratings Based Approach (component: Portfolio, Attribution) with affected 8.0.x. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the system, enabling unauth...
CVE-2018-2783
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with...
CVE-2018-2871
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
