PT-2018-15687

Name of the Vulnerable Software and Affected Versions Oracle Argus Safety versions 7.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the...

PT-2018-15703

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person...

PT-2018-15704

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 7.3.5.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Financial Services Analytical...

PT-2018-15733

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle User Management component, specifically the Proxy User Delegation subcomponent. It allows a low-privileged attacker with...

PT-2018-15738

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks can result in...

PT-2018-15747

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0 through 12.4.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks can result in unauthorized...

PT-2018-15761

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Price Creation and Discovery version 8.0.5 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Price Creation and Discovery. Successful attacks...

PT-2018-15770

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1 and 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks can result in unauthorized...

Unspecified Vulnerability in Oracle Transportation Management (CNVD-2018-01956)

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Transportation Management OTM is one of the components that can be used to manage all transportation activities...

Unspecified Vulnerability in Oracle Agile PLM (CNVD-2018-01957)

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...

CVE-2017-10301: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-10068: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Dashboards. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2018-15673

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Balance Sheet Planning version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Balance Sheet Planning. Successful attacks require hum...

PT-2018-15709

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Labor Management versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Labor Management. Successful attacks can result in unauthorized...

CVE-2018-2679: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2018-2574: Undefined Security Weakness

Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM subcomponent: Outlook Client. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Desktop. Successful...

CVE-2018-2661: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2592: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2716: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2713: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...