PT-2018-15941

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.x, and 16.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management, resulting...

PT-2018-15982

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE...

PT-2018-16012

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2018-16032

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle SOA Suite, resulting in unauthorized read access to a...

PT-2018-15900

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require...

PT-2018-15912

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.18 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit AK component, potentially impacting additional...

CVE-2018-2955: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: Integration. The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-16026

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue affects the Candidate Gateway subcomponent of the PeopleSoft HRMS component, allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. This can...

CVE-2018-3082: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2018-15951

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE...

PT-2018-15904

Name of the Vulnerable Software and Affected Versions Oracle Communications EAGLE LNP Application Processor version 10.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Communications EAGLE LNP Application Processor. Successful attack...

CVE-2018-2975: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-2767: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

PT-2018-16001

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending, resulting in unauthorize...

CVE-2018-3039: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

PT-2018-15914

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows a high-privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit AK executes to compromise it. Successful attacks can result ...

PT-2018-16027

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Financial Aid versions 9.0 and 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Financial Aid, resulting in unauthorized read access to a...

CVE-2018-2963: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...

PT-2018-15917

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue affects the HTTP data path subsystems of the Sun ZFS Storage Appliance Kit AK component, allowing a low-privileged attacker with network access via HTTP to...

PT-2018-15905

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows an unauthenticated attacker with network access via SSL/TLS to compromise the Sun ZFS Storage Appliance Kit AK, resulting in unauthorized read access to a...