CVE-2017-3463

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access vi...

CVE-2017-3493

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker with...

CVE-2017-3583

The CVE-2017-3583 vulnerability affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The issue is exploitable via HTTP with network access and unauthenticated access, requiring user interaction to trigger. Suc...

CVE-2017-3508

Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite subcomponent: Primavera Desktop Integration. Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged attacker with network acce...

CVE-2017-3460

CVE-2017-3460 affects Oracle MySQL Server (Server: Audit Plug-in). Affected: MySQL 5.7.17 and earlier. Issue: high-privilege attacker can authenticate via network and cause a hang or complete DoS of MySQL Server. Mitigation: apply vendor-supplied fixes by upgrading to a version with the CP update...

CVE-2017-3565

CVE-2017-3565 affects Oracle Solaris 11.3, under the RBAC component. The connected sources describe a local, low-privilege vulnerability in Solaris 11.3 that allows an attacker with logon access to compromise Solaris, with attacks requiring user interaction and potentially leading to unauthorized...

CVE-2017-3595

The CVE-2017-3595 entry concerns Oracle WebCenter Sites within Oracle Fusion Middleware (subcomponent: Advanced UI). Affected versions are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise the system, ...

CVE-2017-3495

Oracle FLEXCUBE Direct Banking (Pre-Login) vulnerability CVE-2017-3495 exists in Oracle Financial Services Applications. Connected sources corroborate affected versions 12.0.2 and 12.0.3 and describe an unauthenticated, network-accessible issue via HTTP in the Pre-Login subcomponent that can lead...

CVE-2017-3461

CVE-2017-3461 is a privilege-based vulnerability in Oracle MySQL Server (Server: Security: Privileges). Affected versions are 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows a high-privilege attacker with network access to cause a hang or complete denial of servic...

CVE-2017-3571

Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3459

CVE-2017-3459 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions include 5.7.17 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server, potentially causing a han...

CVE-2017-3546

CVE-2017-3546 affects Oracle PeopleSoft Tools (MultiChannel Framework), specifically SSRF in IMServlet for ToolsRelease 8.55.x (ToolsReleaseDB 8.55; HCM 9.2). Connected docs show SSRF allows remote attacker over network to cause cross-site requests, enabling potentially unauthorized access or por...

CVE-2017-3308

Removed by vendor...

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3575

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3465

CVE-2017-3465 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Affected versions: 5.7.17 and earlier. An attacker with network access via multiple protocols and with low privileges can exploit this to perform unauthorized updates, inserts, or delete...

CVE-2017-3329

CVE-2017-3329 affects Oracle MySQL Server (Server: Thread Pooling). Affected versions are 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows an unauthenticated attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete Do...