CVE-2018-2653

CVE-2018-2653 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent Connected Query. Affected versions: 8.54, 8.55, 8.56. Description confirms an unauthenticated attacker with network access via HTTP can compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access ...

CVE-2018-2674

CVE-2018-2674 affects Oracle FLEXCUBE Direct Banking (Logoff) in Oracle Financial Services Applications, specifically 12.0.2 and 12.0.3. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise the Direct Banking component, with attacks requiring human inte...

CVE-2018-2642

The CVE-2018-2642 entry concerns the Oracle Argus Safety File Upload subcomponent in Oracle Health Sciences Applications. Affected versions are 7.x and 8.0.x. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP, with exploitation requiring user interaction. S...

CVE-2018-2599

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...

CVE-2018-2699

CVE-2018-2699 affects Oracle Database Server’s Application Express component (prior to 5.1.4.00.08). The vulnerability allows an unauthenticated, network-accessible attacker to compromise Application Express via HTTP, with impact including unauthorized update/insert/delete and read access to Appl...

CVE-2018-2730

CVE-2018-2730 impacts the Oracle Retail Merchandising System (Cross Pillar) in Oracle Retail Applications, affected version 16.0. The connected documents describe an easily exploitable vulnerability where a low privileged attacker can access the system over HTTP to perform unauthorized updates, i...

CVE-2018-2653

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Connected Query. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2717

CVE-2018-2717 affects Oracle Solaris SPARC Platform (subcomponent SPARC Platform) on Solaris 10 and 11.3. Root cause is a vulnerability in the SPARC Platform that allows a low-privilege user with logon to compromise Solaris; exploitation requires user interaction. Impacts include unauthorized cre...

CVE-2018-2597

Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications subcomponent: SilverWhere. The supported version that is affected is 8.0.78. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-2630

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2623

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2613

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Login. Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus...

CVE-2018-2650

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: Report. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2617

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2618

CVE-2018-2618 affects the Java cryptography (JCE) key-agreement in OpenJDK/OpenJDK-derived OpenJDK builds such as Java SE, Java SE Embedded, and JRockit. The connected sources describe insufficient strength of keys in the JCE component, enabling an unauthenticated attacker with network access to ...

CVE-2018-2608

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. The supported version that is affected is 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2018-2574

Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM subcomponent: Outlook Client. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Desktop. Successful...

CVE-2018-2637

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker wi...

CVE-2018-2588

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: LDAP. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2018-2695

CVE-2018-2695 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent Query, with affected versions 8.54, 8.55, and 8.56. The vulnerability is exploitable by a low-privilege attacker over HTTP from the network, potentially leading to unauthorized access to confidential data or to data acce...