CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows high privileged attacker...

CVE-2017-3232

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3576

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3612

CVE-2017-3612 affects the Data Store component of Oracle Berkeley DB. Affected: Berkeley DB Data Store prior to version 6.2.32. Several connected sources confirm the underlying issue and its impact, including Nessus/NASL entries referencing libdb before tested versions, and vendor advisories indi...

CVE-2017-3575

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3604

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3607

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3482

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged...

CVE-2017-3561

CVE-2017-3561 affects Oracle VM VirtualBox Core, with affected versions prior to 5.0.38 and prior to 5.1.20. The flaw is described as easily exploitable by a low-privilege user with logon, potentially enabling takeover of Oracle VM VirtualBox and impacting connected products. Public updates exist...

CVE-2017-3534

The CVE-2017-3534 vulnerability affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. An attacker with network access via HTTP and low privileges could compromise data confidentiality and gain unauthorized...

CVE-2017-3480

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

CVE-2017-3480

CVE-2017-3480 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access via HTTP to th...

CVE-2017-3618

Oracle CVE-2017-3618 affects the ASR Manager subcomponent of Oracle Automatic Service Request within Oracle Support Tools, with vulnerable versions prior to 5.7. The vulnerability allows a low-privilege user who can log onto the infrastructure hosting ASR to compromise ASR and gain unauthorized c...

CVE-2017-3576

Summary : CVE-2017-3576 affects the Oracle VM VirtualBox core subcomponent. Affected software: Oracle VM VirtualBox core (Virtualization platform) with vulnerable ranges prior to 5.0.38 and prior to 5.1.20. Root cause/impact : Easily exploitable vulnerability that allows a low-privileged user wit...

CVE-2017-3498

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3611

CVE-2017-3611 concerns the Data Store component of Oracle Berkeley DB. Affected: Berkeley DB Data Store prior to version 6.2.32. The vulnerability can allow takeover of Data Store and requires at least logon to the hosting infrastructure and some user interaction. The CVSS3.0 base score is 7.0 (C...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3604

CVE-2017-3604 affects the Oracle Berkeley DB Data Store component. Affected products/versions are prior to 6.2.32 in the Data Store, with a vulnerability that can be triggered by an attacker with local access and requires user interaction. Successful exploitation can lead to takeover of the Data ...

CVE-2017-3613

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...