PT-2017-11283

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM, requiring human interaction from a person other than the attacker. Successful...

PT-2017-11274

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 Description The issue affects the RDBMS Security component of Oracle Database Server, allowing a high-privileged attacker with Create User privilege and logon access to the...

PT-2017-11366

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks require human...

PT-2017-11335

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks can result in unauthorized update,...

PT-2017-11351

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...

PT-2017-11034

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0 and 12.2.1.2.0 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks...

PT-2017-11331

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub, requiring human interaction from a...

PT-2017-11344

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 2.8 and 2.9 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other...

PT-2017-11350

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a...

PT-2017-11151

Name of the Vulnerable Software and Affected Versions Oracle Communications Policy Management versions 11.5 and 12.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human...

PT-2017-11318

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console, resulting in unauthorized update, insert, or delet...

CVE-2017-3653

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

CVE-2017-10081

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-10235

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

PT-2017-11104

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

PT-2017-11206

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service versions 6.0.x through 7.1.x Oracle Retail Xstore Point of Service versions 15.0.x Oracle Retail Xstore Point of Service version 16.0.0 Description The issue allows an unauthenticated attacker with network...

PT-2017-10897

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Inventory Management versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks can result in...

PT-2017-11250

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11043

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks can result in...