Code injection

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: ADPatch. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure...

CVE-2018-2580

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: ADPatch. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure...

CVE-2018-2580

The CVE-2018-2580 entry concerns Oracle E-Business Suite, specifically the Oracle Applications DBA ADPatch component. Affected versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The vulnerability is exploitable by a high-privilege attacker with logon to the infrastructure where Orac...

CVE-2018-2669

CVE-2018-2669 affects Oracle Hospitality Reporting and Analytics (subcomponent: Report) in Oracle Hospitality Applications, specifically versions 8.5.1 and 9.0.0. The flaw is exploitable over HTTP with network access by an unauthenticated attacker and requires user interaction. Successful attacks...

CVE-2018-2567

CVE-2018-2567 affects Oracle Communications Order and Service Management (Portal subcomponent). The vulnerability exists in supported versions 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. According to the sources, an unauthenticated attacker with network access via HTTP can compromise the syste...

CVE-2017-10077

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...

CVE-2017-10066

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

Design/Logic Flaw

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

CVE-2017-10077

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...

CVE-2017-10398

CVE-2017-10398 affects Oracle Hospitality Cruise Fleet Management (subcomponent: BaseMasterPage) in Oracle Hospitality Applications, with affected version 9.0.2.0. The vulnerability allows a low-privileged attacker who can log on to the infrastructure where Oracle Hospitality Cruise Fleet Managem...

CVE-2017-10077

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...

CVE-2017-10159

CVE-2017-10159 affects the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP). Affected versions are 11.5 and 12.x . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Policy Management, ...

CVE-2017-10066

The CVE-2017-10066 issue concerns Oracle Applications Technology Stack (Oracle Forms) within Oracle E-Business Suite. Affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability is exploitable over HTTP by an unauthenticated network attacker and can lead to unauthorized upda...

CVE-2017-10153

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2017-10077

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...

CVE-2017-10066

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

Unspecified Vulnerability in Oracle Applications DBA

Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle Applications DBA is one of the application database management component. An unspecified vulnerability exists in the AD Utilities subcomponent of the Oracle Applications...

CVE-2017-3562

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10225

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability i...

CVE-2017-10144

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...