CVE-2018-2624

CVE-2018-2624 affects the Sun ZFS Storage Appliance Kit (AK) UI component of Oracle Sun Systems Products Suite. Affected: all versions before 8.7.13. Root cause: untrusted access that allows an unauthenticated, network-based attacker to compromise AK via HTTP. Impact: potential unauthorized acces...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2609

CVE-2018-2609 affects Oracle Agile PLM Security in Oracle Supply Chain Products Suite, with affected versions 9.3.5 and 9.3.6. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise data confidentiality and integrity, potentially enabling unauthorized up...

CVE-2018-2697

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: Emergency Response System. The supported version that is affected is 9.0.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2589

CVE-2018-2589 affects the Oracle Hospitality Simphony Enterprise Server component, impacting versions 2.7, 2.8 and 2.9. An unauthenticated attacker with network access over HTTP can compromise confidentiality and potentially access all Oracle Hospitality Simphony data. The CVSSv3 base score is 7....

CVE-2018-2705

CVE-2018-2705 affects Oracle Banking Payments (Payments Core) in Oracle Financial Services Applications, with affected versions 12.3.0 and 12.4.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP and can compromise Oracle Banking Payments, potentially l...

CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...

CVE-2018-2640

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2018-2582

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols...

CVE-2018-2582

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols...

CVE-2018-2612

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-2583

CVE-2018-2583 affects Oracle MySQL Server (Stored Procedure) with affected versions 5.6.38 and earlier, 5.7.20 and earlier. It allows a high-privilege attacker with network access (via multiple protocols) to crash or hang MySQL Server (complete DOS), potentially impacting other products. Connecte...

CVE-2018-2686

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2685

CVE-2018-2685 affects Oracle VM VirtualBox Core; vulnerable in VirtualBox 5.1.x before 5.1.32 and 5.2.x before 5.2.6. Exploitation is described as easily exploitable with local access and user interaction required, potentially allowing takeover of VirtualBox (and impacting other products). Remedi...

CVE-2018-2622

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2565

CVE-2018-2565 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected are MySQL 5.7.20 and earlier. The vulnerability is exploitable over the network via multiple protocols by a highly-privileged attacker and can cause a hang or a frequently repeatable crash (complete DOS) of MySQL ...

CVE-2018-2696

CVE-2018-2696 affects the MySQL Server component (Server : Security : Privileges) in Oracle MySQL. Reported affected versions include 5.6.38 and earlier, and 5.7.20 and earlier. The vulnerability can be exploited remotely by an unauthenticated attacker over several network protocols, potentially ...

CVE-2018-2694

CVE-2018-2694 describes a vulnerability in the core of the Oracle VM VirtualBox component. Affected are VirtualBox versions prior to 5.1.32 and prior to 5.2.6. The issue allows a low-privilege, logged-on attacker to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox enviro...

CVE-2018-2667

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2018-2668

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...