Design/Logic Flaw

Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications subcomponent: GUI. The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2904

Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications subcomponent: GUI. The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2904

CVE-2018-2904 affects Oracle Communications EAGLE LNP Application Processor GUI in Oracle Communications Applications (10.x). The vulnerability allows an unauthenticated attacker with network access over HTTP to read and modify data, with a CVSS v3.0 base score of 6.5 (Impact: Confidentiality and...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2936

CVE-2018-2936 affects Oracle Communications Messaging Server (subcomponent: Web Client) in Oracle Communications Applications, with version 3.x affected. The root cause is a vulnerability in the Web Client subcomponent that allows unauthenticated attackers over HTTP to compromising data confident...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2904

Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications subcomponent: GUI. The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Unspecified Vulnerability in Oracle Communications Messaging Server

Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...

Apache CXF CVE-2018-8039 TLS Hostname Verification Security Bypass Vulnerability

Description Apache CXF is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks. The following versions of product are vulnerable: Apache CXF 3.1.16...

Oracle Communications Order and Service Management Component Remote Vulnerability (CNVD-2018-09096)

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. A security vulnerability exists in the WebUI...

Oracle Solaris Critical Patch Update : apr2018_SRU11_3_31_6_0 (Spectre)

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Communications LSMS component of Oracle Communications Applications subcomponent: Platform Kernel. Supported versions that are affected are 13.1, 13.2 and 13.3. Difficult to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2018-2756

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2018-2756

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2018-2756

CVE-2018-2756 affects Oracle Communications Order and Service Management (WebUI) in Oracle Communications Applications. A vulnerability in the WebUI subcomponent impacts supported versions 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. It allows a low-privileged attacker with network access via H...

Solaris 10 (sparc) : 142785-17

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 142786-17

Oracle Communications Calendar Server 7u5-17.22x86: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component

Oracle Communications Applications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management component. A security vulnerability exists in the Portal subcomponen...

Unspecified Vulnerability in Oracle Communications Order and Service Management Component

Oracle Communications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Oracle Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. Oracle Communications Order and Servic...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component (CNVD-2018-01728)

Oracle Communications is a suite of applications from Oracle Corporation for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management components. A security vulnerability exists in the Portal...