CVE-2018-2707: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

PT-2018-15688

Name of the Vulnerable Software and Affected Versions Oracle Argus Safety versions 7.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Argus Safety, potentially impacting additional products. Successful attacks can result in...

CVE-2018-2662: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7 and 6.4.1. Easily exploitable vulnerability allows low privileged attacker...

Unspecified Vulnerability in Oracle Transportation Management (CNVD-2018-01956)

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Transportation Management OTM is one of the components that can be used to manage all transportation activities...

PT-2018-15709

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Labor Management versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Labor Management. Successful attacks can result in unauthorized...

PT-2018-15766

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk Measurement and Management version 8.0.5 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Market Risk Measurement and Management,...

PT-2018-15770

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1 and 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks can result in unauthorized...

PT-2018-15673

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Balance Sheet Planning version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Balance Sheet Planning. Successful attacks require hum...

CVE-2018-2714: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2658: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2018-2713: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2018-15703

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person...

CVE-2018-2716: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2018-15651

Name of the Vulnerable Software and Affected Versions Java SE versions 6u171, 7u161, 8u152, and 9.0.1 Java SE Embedded version 8u151 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Java SE or Java SE Embedded executes to compromise Java SE or Java S...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02276)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and Jrockit (CNVD-2018-02246)

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a Java platform for developing...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-02257)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the JavaFX subcomponent of th...

CVE-2018-2647

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02274)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and Jrockit (CNVD-2018-02238)

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a Java platform for developing...