CVE-2018-3133

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3148

CVE-2018-3148 affects Oracle Primavera Unifier (Web Access subcomponent). Affected versions: 15.1, 15.2, 16.1, 16.2, 17.1–17.12 and 18.1–18.8. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access; successful exploitation may require user interaction. Impac...

CVE-2018-3294

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2018-3129

The CVE-2018-3129 entry concerns Oracle PeopleSoft Enterprise PeopleTools Portal (PeopleTools component). Affected products/versions are PeopleSoft Portal, versions 8.55, 8.56 and 8.57. The vulnerability allows an unauthenticated, network-accessible attacker to exploit over HTTP, with user intera...

CVE-2018-3232

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3192

CVE-2018-3192 affects Oracle PeopleSoft’s PeopleTools component (Query subcomponent) with affected versions 8.55 and 8.56. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially taking over the affected system....

CVE-2018-3242

CVE-2018-3242 affects Oracle E-Business Suite Marketing Administration (Marketing component). Affected are versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing,...

CVE-2018-3292

CVE-2018-3292 affects the Oracle VM VirtualBox core. A vulnerability exists in VirtualBox prior to version 5.2.20 that can lead to takeover of VirtualBox. Exploitation details in the public advisories indicate an easily exploitable issue with local/ logon access and requires user interaction (per...

CVE-2018-3293

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3133

CVE-2018-3133 concerns Oracle MySQL Server (subcomponent: Server: Parser). Affected are MySQL Server versions 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can trigger a hang or frequen...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3202

The CVE concerns Oracle PeopleSoft Products’ PeopleTools Performance Monitor in versions 8.55 and 8.56. A unauthenticated attacker with network access via HTTP could read a subset of data, per CVSS 3.0 base metrics (C:L, I:N, A:N). Connected sources confirm the affected component and versions; no...

CVE-2018-3264

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2018-3165

CVE-2018-3165 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PeopleTools component (subcomponent: SQR). Affected versions are 8.55 and 8.56. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP and can lead to takeover of PeopleSof...

CVE-2018-3259

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM. Successful attacks of...

CVE-2018-3166

The CVE-2018-3166 vulnerability affects Oracle Hospitality Applications’ Hospitality Cruise Fleet Management component (Emergency Response System) version 9.0. It allows a low-privilege, network-accessible attacker over HTTP to modify or delete data, with an impact on data integrity (CVSSv3.0: 6....

CVE-2018-3264

CVE-2018-3264 affects the Solaris kernel component in Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a low-privilege attacker with local access to compromise Solaris, enabling unauthorized updates/inserts/deletes to data and partial denial of service (parti...

CVE-2018-3299

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Text. Successful attacks...

CVE-2018-3251

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3203

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...