Unspecified Vulnerability in Oracle Application Object Library

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. An unspecified vulnerability exists in t...

WinDBG and JavaScript Analysis

This blog was authored by Paul Rascagneres.IntroductionJavaScript is frequently used by malware authors to execute malicious code on Windows systems because it is powerful, natively available and rarely disabled. Our previous article on .NET analysis generated much interest relating to how to use...

CVE-2017-10244

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Attachments. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-10244

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Attachments. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-10246

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: iHelp. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10177

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Flexfields. The supported version that is affected is 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

Design/Logic Flaw

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Flexfields. The supported version that is affected is 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2017-10177

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Flexfields. The supported version that is affected is 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2017-10244

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Attachments. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-10246

CVE-2017-10246 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL), subcomponent iHelp. Affected versions: 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability enables unauthenticated, network-accessible HTTP attackers to access or modify AOL data, per CVSS3.0 base scor...

PT-2017-11169

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.2.6 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Application Object Library component, specifically the Flexfields subcomponent. This can result...

CVE-2017-10244: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Attachments. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-10246: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: iHelp. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10177: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Flexfields. The supported version that is affected is 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

PT-2017-11238

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle Application Object Library component, specifically the iHelp subcomponent. It allows an unauthenticated attacker with network...

PT-2017-11236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle Application Object Library component, specifically the Attachments subcomponent. It allows an unauthenticated attacker with...

Oracle Application Object Library Remote Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

Oracle Application Object Library Remote Vulnerability (CNVD-2017-27315)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

Oracle E-Business Suite Unauthorized Operation Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

Oracle Application Object Library Information Disclosure Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...