PT-2017-15984

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue affects the Oracle Customer Interaction History component, specifically the Admin Console subcomponent. It allows an unauthenticated attacker with network access via...

PT-2017-8737

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 4.3 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster, resulting in unauthorized read access to a...

PT-2017-15923

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.2 Description The issue is related to a vulnerability in the SQLPlus component of Oracle Database Server. This vulnerability is difficult to exploit and allows a high-privileged attacker...

PT-2017-15951

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle User Management component, specifically the User Name/Password Management subcomponent. It allows an unauthenticated attacker...

PT-2017-16010

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1, 16.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio...

CVE-2017-3604: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3536: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-15937

Name of the Vulnerable Software and Affected Versions Oracle Primavera Products Suite versions 9.13, 9.14, 10.0, 10.1, 15.1, 15.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Primavera Unifier component. Successful attacks require human...

CVE-2017-3609: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

PT-2017-15999

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a...

PT-2017-15769

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor versions 3.1.6.8003 and earlier MySQL Enterprise Monitor versions 3.2.1182 and earlier MySQL Enterprise Monitor versions 3.3.2.1162 and earlier Description The issue allows a high privileged attacker with network acces...

CVE-2017-3254: Undefined Security Weakness

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail...

CVE-2017-3614: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

PT-2017-16042

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure to compromise Data Store. This requires human interaction from a person...

PT-2017-15970

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2017-3486: Undefined Security Weakness

Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...

PT-2017-15945

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require...

CVE-2017-3512

Vulnerability in the Java SE component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3430

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...