CVE-2017-10194

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10154

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

PT-2017-11146

Name of the Vulnerable Software and Affected Versions Oracle Access Manager version 11.1.2.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager, resulting in unauthorized read access to a subset of Oracle Access Manager...

PT-2017-11156

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11186

Name of the Vulnerable Software and Affected Versions Oracle Integrated Lights Out Manager ILOM versions prior to 3.2.6 Description The issue allows a high-privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager ILOM, resulting in unauthorized read acce...

PT-2017-11273

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11280

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 16.0 and 17.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Siebel CRM Desktop component, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11294

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8, resulting in...

PT-2017-11295

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8, requiring human interaction from a person other than the...

PT-2017-11301

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Applications Technology Stack component, resulting i...

PT-2017-11311

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebLogic Server, resulting in unauthorized read access to a...

PT-2017-11314

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8, resulting in unauthorized read access to a subset of Oracle...

PT-2017-11335

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks can result in unauthorized update,...

PT-2017-11338

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read...

PT-2017-11339

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...

PT-2017-11351

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other...

PT-2017-11354

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized read access to a subset...

PT-2017-11395

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue affects the Staffing Front Office subcomponent, allowing a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. This can result in...

CVE-2017-10319: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...