CVE-2017-3357

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-3371

CVE-2017-3371 affects Oracle E-Business Suite’s iSupport (User Interface) with affected versions 12.1.1, 12.1.2, and 12.1.3. The vulnerability is described as unauthenticated but requires network access via HTTP and some user interaction, enabling potential unauthorized access to sensitive data a...

CVE-2017-3361

CVE-2017-3361 affects Oracle E-Business Suite, specifically the installed base UI component. Affected are 12.1.1, 12.1.2 and 12.1.3. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base, with successful attacks potentially granting...

CVE-2016-5509

CVE-2016-5509 affects Oracle FLEXCUBE Investor Servicing (Core) in Oracle Financial Services Applications. Affected versions are 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP, potentially resulting in unauthori...

CVE-2016-5548

CVE-2016-5548 is a vulnerability in the Libraries subcomponent of Oracle Java SE/Java SE Embedded (OpenJDK context in many advisories) with a covert timing-channel flaw in the DSA implementation. Affected Java versions include Java SE 6u131, 7u121, 8u112 and Java SE Embedded 8u111. The issue can ...

CVE-2017-3317

Removed by vendor...

CVE-2017-3312

Removed by vendor...

CVE-2017-3291

Removed by vendor...

CVE-2016-5549

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2016-5528

Removed by vendor...

CVE-2017-3428

CVE-2017-3428 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment User Interface. Affected versions: 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment; attacks may lead to unauthorized access to ...

CVE-2017-3244

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2017-3291

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure...

CVE-2017-3243

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3239

Removed by vendor...

CVE-2017-3313

CVE-2017-3313 affects the MySQL Server component (subcomponent: Server: MyISAM). Affected: MySQL/MariaDB versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. Impact described as unauthorized access to data or full data access on MySQL Server if exploited by a low-privileged us...

CVE-2017-3256

CVE-2017-3256 affects Oracle MySQL Server (subcomponent: Server: Replication). Affected: MySQL 5.7.16 and earlier. Description specifies that a low-privileged attacker with network access via multiple protocols can cause a hang or a frequent crash (complete DOS) of MySQL Server. Connected documen...

CVE-2017-3310

CVE-2017-3310 affects Oracle Database Server’s OJVM component in versions 11.2.0.4 and 12.1.0.2. The vulnerability allows a low-privileged attacker with Create Session and Create Procedure privileges, with network access via multiple protocols, to compromise OJVM. The exploitation requires user i...