PT-2017-11207

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11213

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality RES 3700 executes to compromise it. Successful attacks require human interaction fr...

PT-2017-11217

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows physical access to compromise Oracle Hospitality RES 3700, potentially impacting additional products. Successful attacks can result in unauthorized access to critical data,...

PT-2017-11239

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11214

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Materials Control versions 8.31.4 through 8.32.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks can result in...

CVE-2017-10009: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10131: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

CVE-2017-10002: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications subcomponent: Settings and Config. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10128: Undefined Security Weakness

Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications subcomponent: General. Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10146: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10257: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Browse Folder Hierarchy. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10236: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

PT-2017-11067

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 6.1.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Payment Interface component, resulting in unauthorized access to critical data or comple...

PT-2017-11222

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Dining Room Management version 8.0.75 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Dining Room Management. Successful attacks can result i...

PT-2017-11215

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Materials Control versions 8.31.4 and 8.32.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks can result in unauthoriz...

CVE-2017-10012: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Operations. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

PT-2017-11062

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized...

CVE-2017-10027: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11074

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony First Edition Venue Management version 3.9 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition Venue Management. Successful...

PT-2017-11164

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform versions 5.0 through 6.1 Oracle Retail Open Commerce Platform versions 15.0 through 15.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Retail...