CVE-2017-3525: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-3585: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface subsystem. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3568: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing and Login. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit vulnerability allows...

CVE-2017-3583: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3577: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3565: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3501: Undefined Security Weakness

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite subcomponent: Platform. Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-15951

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle User Management component, specifically the User Name/Password Management subcomponent. It allows an unauthenticated attacker...

CVE-2017-3618: Undefined Security Weakness

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

PT-2017-15999

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a...

PT-2017-15925

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing, resulting in unauthorized creation, deletio...

PT-2017-15752

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result in unauthoriz...

CVE-2017-3602: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3465: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2017-15914

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 12.0.0 and 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthorized update,...

PT-2017-15922

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorized...

PT-2017-16003

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.1 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks can result in unauthorized creation, deletion, or...

CVE-2017-3487: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attack...

PT-2017-16019

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.1.41 and earlier Description The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors, resulting in unauthorized update, insert, or...

CVE-2017-3484: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...