PT-2017-11305

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Application Object Library component, specifically the Diagnostics subcomponent. It allows an unauthenticated attacker wit...

CVE-2017-10413: Undefined Security Weakness

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite subcomponent: Multiplatform Based on HTML5. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...

PT-2017-11328

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PT PeopleTools versions 8.54, 8.55, and 8.56 Description The issue allows an unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise it. Successful attac...

PT-2017-11394

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 2.6 through 2.9 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony, resulting in unauthorized update, insert, or delete access to...

PT-2017-11312

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PT PeopleTools versions 8.55 and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, resulting in unauthorized access to critical...

PT-2017-11293

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8, resulting in unauthorized access to critical data or complete...

PT-2017-11049

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks require human interaction from a person...

PT-2017-11380

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Knowledge Management component, specifically the User Interface subcomponent. It allows an unauthenticated...

PT-2017-11349

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PT PeopleTools versions 8.55 and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, resulting in unauthorized access to critical...

Unspecified Vulnerability in Oracle Common Applications Calendar (CNVD-2017-33681)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Oracle Common Application Calendar CAC, also known as Oracle...

CVE-2017-10268

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructur...

PT-2017-4122

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-6 Description The issue is related to the ReadPSDImage function in the coders/psd.c component of ImageMagick, which can cause a denial of service or possibly have other impacts via a crafted file. This is due to a...

PT-2017-4106

Name of the Vulnerable Software and Affected Versions libvirt versions 2.3.0 and later Description The issue is related to errors in the certificate authentication procedure in the Libvirt virtualization management library. Exploitation of this issue allows a remote attacker to access confidentia...

Huawei FusionSphere Authorization Issues Vulnerability

Huawei FusionSphere, a product of Huawei, is a cloud operating system product developed based on the OpenStack framework. Huawei FusionSphere suffers from an authorization issue vulnerability, which can be exploited by an attacker to execute arbitrary commands, which in turn can query, modify, an...

Hijacked Environment Variables

Overview The gruntcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real securi...

CVE-2017-3653

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

CVE-2017-10251

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Test Framework. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2017-10256

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10250

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Tuxedo. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterpri...

CVE-2017-10231

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications subcomponent: AWExport. The supported version that is affected is 2.2.05.062. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...