PT-2018-2373

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to inadequate access control in the Web Access component, allowing an unauthenticated attacker...

PT-2018-2236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Partner Dashboard subcomponent of Oracle Partner Management. It...

PT-2018-2378

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel version 11.3 Description The issue is related to inadequate access control in the Solaris kernel, allowing a low-privileged attacker with network access via the SMB protocol to compromise...

PT-2018-2354

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 18.7 through 18.9 Description The issue is related to inadequate access control in the Siebel UI Framework component, specifically the UIF Open UI subcomponent. This allows an unauthenticated attacker with network...

PT-2018-2238

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to inadequate access control in the Oracle Applications Manager component of Oracle E-Business Suite. This can be exploited by a...

PT-2018-2233

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The vulnerability in the Oracle iStore component's web interface is related to inadequate access control. It can be...

PT-2018-2366

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the Activity Guide component of Oracle PeopleSoft Enterprise PeopleTools. It allows an...

PT-2018-2368

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools component, specifically the Portal subcomponent. It allows a...

PT-2018-2357

Name of the Vulnerable Software and Affected Versions Oracle Construction and Engineering Suite Primavera Unifier component versions 15.1, 15.2, 16.1, 16.2, 17.1 through 17.12, and 18.1 through 18.8 Description The issue is related to inadequate access control in the Primavera Unifier component,...

PT-2018-2423

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 through 8.56 Description The issue is related to inadequate access control in the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools. This can be exploited by a remote...

PT-2018-2422

Name of the Vulnerable Software and Affected Versions Java SE versions 6u201, 7u191, and 8u182 Java SE Embedded version 8u181 JRockit version R28.3.19 Description The issue is related to the Sound component of Oracle Java SE, Java SE Embedded, and JRockit, and is caused by inadequate access...

PT-2018-2429

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.23 and prior MySQL Server versions 8.0.12 and prior Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, specifically in the Server: Partition subcomponent. This...

PT-2018-2376

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.23 and prior Oracle MySQL versions 8.0.12 and prior Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, specifically in the Server: Security: Audit subcomponent...

PT-2018-1603

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9.0 Description The issue is related to a permissions bypass in the checkGrantUriPermissionLocked function of ActivityManagerService.java. This could lead to local escalation of privilege with no additional executi...

PT-2018-1448

Name of the Vulnerable Software and Affected Versions Oracle SuperCluster Specific Software versions prior to 2.5.0 Description The issue is related to inadequate access control in the SuperCluster Virtual Assistant component, allowing an unauthenticated attacker with network access via multiple...

PT-2018-1393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with...

PT-2018-1438

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver version 11.3 Description The issue is related to inadequate access control in the NVIDIA-GFX Kernel driver component of the Solaris operating system. It allows a...

PT-2018-1414

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.3 Description The issue is related to inadequate access control in the Outside In Filters component of the Oracle Outside In Technology software development kit SDK. This can be exploited by a remote...

PT-2018-1397

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite versions 11.1.1.7.0 through 12.2.1.3.0 Description The issue is related to inadequate access control in the Process Analysis & Discovery component, allowing an unauthenticated attacker with network acce...

PT-2018-1395

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Oracle CRM Technical Foundation component, specifically in the...