PT-2017-11040

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.9.0 and 12.2.1.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a perso...

PT-2017-11130

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks require human interaction from a person other than the...

PT-2017-11063

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.9.6 Oracle Hospitality Applications versions 8.10.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Hospitality WebSuite8 Cloud Service. Successf...

PT-2017-11209

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0.0 through 4.2.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized update, insert, or...

CVE-2017-10149: Undefined Security Weakness

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite subcomponent: Platform. Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10196: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside I...

CVE-2017-10057: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Discussion Forum. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10187: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

PT-2017-11221

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Materials Management version 7.30.562 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Materials Management. Successful attacks can result in...

CVE-2017-10195: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

PT-2017-11046

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications MICROS BellaVita version 2.7.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful attacks can result in unauthorized update, insert, ...

PT-2017-11249

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-10985

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2017-10256: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

PT-2017-11081

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking...

CVE-2017-10063: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-11096

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorized...

PT-2017-11090

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.5 through 9.3.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the...

PT-2017-11170

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, and 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction...

CVE-2017-3653: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...