CVE-2018-3206: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-3241: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows...

CVE-2018-3266: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Verified Boot. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3299: Undefined Security Weakness

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Text. Successful attacks...

CVE-2018-3215: Undefined Security Weakness

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3166: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: Emergency Response System. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component (CNVD-2019-37419)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

PT-2018-2274

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2264

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2402

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.41 and prior Oracle MySQL versions 5.7.23 and prior Oracle MySQL versions 8.0.12 and prior Description The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: Mer...

PT-2018-2269

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2477

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated...

PT-2018-2370

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to insufficient access control in the Web Access component, allowing an unauthenticated attack...

PT-2018-2240

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue is related to insufficient access control in the Oracle Applications Framework component of Oracle E-Business Suite. This can be exploited by a remot...

PT-2018-2354

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 18.7 through 18.9 Description The issue is related to inadequate access control in the Siebel UI Framework component, specifically the UIF Open UI subcomponent. This allows an unauthenticated attacker with network...

PT-2018-2361

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.4 Description The issue is related to inadequate access control in the Hyperion Common Events component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with network access...

PT-2018-2368

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools component, specifically the Portal subcomponent. It allows a...

PT-2018-2374

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated...

PT-2018-2363

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.4 Description The issue is related to insufficient access control in the Hyperion Common Events component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with network acce...

PT-2018-2479

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Oracle PeopleSoft Products version 8.57 Description The issue is related to insufficient access control in the Stylesheet component of Oracle PeopleSoft Enterprise...