vCenter Server Appliance - Backup/Restore Recommendations

Native File-Based Backup and Restore Recommended vCenter Server Appliance Data Integrity Best Practices recommends using the native file-based backup and restore operations to protect the vCenter Server Appliance. Review: VMware vSphere User Guide: Considerations and Limitations for File-Based...

AIX NTP v4 Advisory : ntp_advisory5.asc (IV81129) (IV81130)

The remote AIX host has a version of Network Time Protocol NTP installed that has a vulnerability when ntp is started with the -g option. A remote, unauthenticated attacker could send crafted data to ntp which would enable the time to be changed, enabling further attacks. %NASLMINLEVEL 70300 C...

CVE-2017-10211

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successf...

CVE-2017-10170

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless/WAP. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

CVE-2017-10085

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

Buffer overflow

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RE...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10171

CVE-2017-10171 affects Oracle Marketing in Oracle E-Business Suite Home Page across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with HTTP access to compromise Oracle Marketing; attacks require human interaction. Impact can include unauthori...

CVE-2017-10002

Oracle Hospitality Inventory Management (Settings and Config) in Oracle Hospitality Applications (versions 8.5.1 and 9.0.0) is affected by CVE-2017-10002. An attacker with low privileges who can access the system over HTTP may compromise data: unauthorized update/insert/delete and unauthorized re...

CVE-2017-10009

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-6757

A vulnerability in Cisco Unified Communications Manager 10.52.10000.5, 11.01.10000.10, and 11.51.10000.6 could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26283)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

Oracle WebLogic Server Remote Vulnerability (CNVD-2017-26393)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Cisco Unified Communications Manager SQL Injection Vulnerability (cisco-sa-20170802-ucm)

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a blind SQL injection attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this...

Oracle Retail Open Commerce Platform Remote Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Framework subcomponent of the Retail Open Commerce Platform component of...

Oracle iSupport Remote Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...

Oracle Agile PLM Local Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM is one of the project management components. A security vulnerability exists in the Security subcomponent of...

Unspecified Vulnerability in Oracle Communications Convergence

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Convergence is one of the components used for cable communications. A security vulnerability exists in the Mail Proxy dojo subcomponent of the Communications...

Oracle Retail Xstore Point of Service Remote Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Point of Service is one of the retail point of service management components. A security vulnerability exists in the Point of Sale subcomponent of the Retail Xstore Point of...