PT-2018-15914

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows a high-privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit AK executes to compromise it. Successful attacks can result ...

UBUNTU-CVE-2018-2767

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

UBUNTU-CVE-2018-3056

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

PT-2018-15952

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCU...

CVE-2018-3105: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Health Care FastPath. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network acce...

CVE-2018-3076: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products subcomponent: ISIR Processing. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2018-2905: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromi...

CVE-2018-3038: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2921: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2927: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2915: Undefined Security Weakness

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion...

CVE-2018-3021: Undefined Security Weakness

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

CVE-2018-2994: Undefined Security Weakness

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2018-3101: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: Portlet Services. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2598: Undefined Security Weakness

Vulnerability in the MySQL Workbench component of Oracle MySQL subcomponent: Workbench: Security: Encryption. Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

PT-2018-16027

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Financial Aid versions 9.0 and 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Financial Aid, resulting in unauthorized read access to a...

CVE-2018-2923: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

PT-2018-16002

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collatera...

PT-2018-16018

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.22 and prior Oracle MySQL versions 8.0.11 and prior Description The issue allows a low privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized read acce...

ceph: ceph-mon does not perform authorization on OSD pool ops

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete and corrupt snapshot images...