PT-2017-11096

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorized...

CVE-2017-10134: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: eProcurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM...

PT-2017-11170

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, and 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction...

CVE-2017-10238: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10070: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Maintenance Folders. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-11063

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.9.6 Oracle Hospitality Applications versions 8.10.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Hospitality WebSuite8 Cloud Service. Successf...

PT-2017-11249

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11074

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony First Edition Venue Management version 3.9 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition Venue Management. Successful...

PT-2017-11045

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1 Description The issue affects the Web Access component of Oracle Primavera Products Suite, allowing a low-privileged attacker with network access via HTTP...

PT-2017-10985

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2017-3562: Undefined Security Weakness

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

PT-2017-11209

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0.0 through 4.2.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized update, insert, or...

CVE-2017-10149: Undefined Security Weakness

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite subcomponent: Platform. Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10046: Improper Privilege Management

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2017-10132: Undefined Security Weakness

Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/iOS. The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile...

CVE-2017-10222: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications subcomponent: Production Tool. Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11220

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized update,...

PT-2017-11248

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11192

Name of the Vulnerable Software and Affected Versions Oracle Hospitality e7 version 4.2.1 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks can result in...

PT-2017-10972

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...