CVE-2016-8298

CVE-2016-8298 affects the Oracle FLEXCUBE Private Banking component (subcomponent: Product / Instrument Search). Affected versions are 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component, potentially leading to unau...

CVE-2017-3348

CVE-2017-3348 affects Oracle E-Business Suite Oracle Marketing (User Interface subcomponent). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. Description: an unauthenticated attacker with network access via HTTP can compromise Oracle Marketing; successful attacks requir...

CVE-2017-3242

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

CVE-2017-3262

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2017-3392

CVE-2017-3392 affects Oracle E-Business Suite, specifically the Oracle Advanced Outbound Telephony component (User Interface). Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The vulnerability is described as easily exploitable via HTTP with network access and una...

CVE-2017-3298

CVE-2017-3298 affects Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent PIA Core Technology). Affected versions are 8.54 and 8.55. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise PeopleSoft Enterprise PeopleTools; successful exploits r...

CVE-2017-3294

CVE-2017-3294 describes a vulnerability in the Oracle Outside In Technology (subcomponent: Outside In Filters). Connected sources confirm affected products/versions: Oracle Outside In Technology 8.5.2 and 8.5.3 are vulnerable when data is processed over a network. The issue can be triggered via H...

CVE-2016-8318

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2017-3424

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3253

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: 2D. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3244

CVE-2017-3244 affects Oracle MySQL Server (subcomponent: Server: DML). Affected versions: 5.5.53 and earlier, 5.6.34 and earlier, 5.7.16 and earlier. Description from connected advisory confirms an easily exploitable vulnerability that allows a low-privileged attacker with network access via mult...

CVE-2016-8305

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise...

CVE-2016-8282

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3272

CVE-2017-3272 affects Oracle Java SE/OpenJDK Libraries (Java SE 6u131, 7u121, 8u112; Java SE Embedded 8u111). OpenJDK/OpenJDK builds with Libraries component are vulnerable to an unauthenticated, network-accessible attack that can lead to takeover of Java SE/Embedded; exploitation requires user i...

CVE-2017-3299

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2016-5590

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

CVE-2017-3244

Removed by vendor...

CVE-2017-3238

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8329

CVE-2016-8329 affects Oracle PeopleSoft Enterprise PeopleTools (Mobile Application Platform) with affected versions 8.54 and 8.55. The vulnerability is reachable over HTTP with network access, is unauthenticated, and requires user interaction to exploit, potentially enabling unauthorized update/r...