Oracle Primavera P6 Enterprise Project Portfolio Management Remote Vulnerability

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 EPPM is one of the components used for project planning, management and execution. Primavera P6 Enterprise Project Portfolio...

Oracle Hospitality e7 Unauthorized Operation Vulnerability

Oracle Hospitality Applications is a set of business applications, servers and storage solutions for hotel management from Oracle. The program provides human resources cost management, provide customers with the entire journey of service tracking management to improve customer satisfaction and...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28402)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Oracle Java SE Remote Vulnerability (CNVD-2017-21148)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the ImageIO subcomponent of t...

Oracle PeopleSoft Enterprise PeopleTools Unauthorized Operation Vulnerability (CNVD-2017-28379)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28400)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-21026)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle Sun Systems Products Suite Unauthorized Modification Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. A local attacker...

Oracle Primavera Unifier Unauthorized Operation Vulnerability (CNVD-2017-28230)

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Platform subcomponent of the Primavera Unifier component of Oracle...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28399)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

vCenter Server Appliance - Backup/Restore Recommendations

Native File-Based Backup and Restore Recommended vCenter Server Appliance Data Integrity Best Practices recommends using the native file-based backup and restore operations to protect the vCenter Server Appliance. Review: VMware vSphere User Guide: Considerations and Limitations for File-Based...

AIX NTP v4 Advisory : ntp_advisory5.asc (IV81129) (IV81130)

The remote AIX host has a version of Network Time Protocol NTP installed that has a vulnerability when ntp is started with the -g option. A remote, unauthenticated attacker could send crafted data to ntp which would enable the time to be changed, enabling further attacks. %NASLMINLEVEL 70300 C...

CVE-2017-10211

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successf...

CVE-2017-10170

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless/WAP. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

CVE-2017-10085

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

Buffer overflow

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RE...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10171

CVE-2017-10171 affects Oracle Marketing in Oracle E-Business Suite Home Page across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with HTTP access to compromise Oracle Marketing; attacks require human interaction. Impact can include unauthori...

CVE-2017-10002

Oracle Hospitality Inventory Management (Settings and Config) in Oracle Hospitality Applications (versions 8.5.1 and 9.0.0) is affected by CVE-2017-10002. An attacker with low privileges who can access the system over HTTP may compromise data: unauthorized update/insert/delete and unauthorized re...

CVE-2017-10009

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...