CVE-2018-3215: Undefined Security Weakness

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3128: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with network access via HTTP to compromise...

CVE-2018-3281: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows...

CVE-2018-3134: Undefined Security Weakness

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: User Group Management. The supported version that is affected is 6.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

PT-2018-2274

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to insufficient access control in the Oracle User Management component, allowing a high-privileged attacker with network access vi...

UBUNTU-CVE-2018-3247

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Merge. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

PT-2018-2239

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing...

PT-2018-2479

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Oracle PeopleSoft Products version 8.57 Description The issue is related to insufficient access control in the Stylesheet component of Oracle PeopleSoft Enterprise...

PT-2018-2430

Name of the Vulnerable Software and Affected Versions Oracle Virtual Directory versions 11.1.1.7.0 through 11.1.1.9.0 Description The issue is related to insufficient access control in the Virtual Directory Manager component of Oracle Virtual Directory, allowing a low-privileged attacker with...

PT-2018-2370

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to insufficient access control in the Web Access component, allowing an unauthenticated attack...

PT-2018-2404

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise Interaction Hub version 9.1.0.0 Description The issue is related to insufficient access control in the Application Portal component of PeopleSoft Enterprise Interaction Hub, allowing a low-privileged attacker with network...

PT-2018-2236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Partner Dashboard subcomponent of Oracle Partner Management. It...

PT-2018-2240

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue is related to insufficient access control in the Oracle Applications Framework component of Oracle E-Business Suite. This can be exploited by a remot...

PT-2018-2264

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2269

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2312

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications MICROS Retail-J versions 12.1.2 and 13.0.0 Description The issue is related to inadequate access control in the Back Office component of MICROS Retail-J, allowing an unauthenticated attacker with network access via...

PT-2018-2354

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 18.7 through 18.9 Description The issue is related to inadequate access control in the Siebel UI Framework component, specifically the UIF Open UI subcomponent. This allows an unauthenticated attacker with network...

PT-2018-2361

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.4 Description The issue is related to inadequate access control in the Hyperion Common Events component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with network access...

PT-2018-2366

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the Activity Guide component of Oracle PeopleSoft Enterprise PeopleTools. It allows an...