CVE-2017-3454

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2017-3508

Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite subcomponent: Primavera Desktop Integration. Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged attacker with network acce...

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3618

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3521

CVE-2017-3521 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration) on version 9.2. The vulnerability is described as exploitable over HTTP by a high-privilege attacker with network access, enabling unauthorized creation, delet...

CVE-2017-3492

The CVE-2017-3492 vulnerability affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The issue allows a low-privileged attacker with network access via HTTP to read...

CVE-2017-3463

CVE-2017-3463 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Security: Privileges). The MiracleLinux advisories indicate affected MySQL Server instances include 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows a highly privileged attacker...

CVE-2017-3473

The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...

CVE-2017-3474

CVE-2017-3474 affects the Solaris component Zone in Oracle Solaris 11.3. The vulnerability enables a low-privilege, local attacker with logon to the Solaris host to compromise confidentiality by unauthorized read access to a subset of Solaris data. The CVSS v3.0 metrics indicate a low impact (C:L...

CVE-2017-3499

CVE-2017-3499 affects Oracle Fusion Middleware’s Oracle Social Network Android Client (prior to 11.1.12.0.0). It is exploitable over HTTPS by an unauthenticated, network-accessing attacker, potentially leading to unauthorized access to confidential Oracle Social Network data. Root cause and speci...

CVE-2017-3525

CVE-2017-3525 affects Oracle PeopleSoft Enterprise SCM Service Procurement (subcomponent: Usability) version 9.2. The vulnerability arises in that component, with an attacker able to exploit over a network via HTTP by a high-privilege user to compromise data; impact includes unauthorized creation...

CVE-2017-3561

CVE-2017-3561 affects Oracle VM VirtualBox Core, with affected versions prior to 5.0.38 and prior to 5.1.20. The flaw is described as easily exploitable by a low-privilege user with logon, potentially enabling takeover of Oracle VM VirtualBox and impacting connected products. Public updates exist...

CVE-2017-3583

The CVE-2017-3583 vulnerability affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The issue is exploitable via HTTP with network access and unauthenticated access, requiring user interaction to trigger. Suc...

CVE-2017-3592

CVE-2017-3592 affects Oracle E-Business Suite Payables (Self Service Manager) across 12.1.1–12.2.6. A remote attacker over HTTP with high privileges can compromise Payables, enabling unauthorized creation/modification/deletion of data. The CVE is noted in Oracle’s April 2017 CPU advisory and is r...

CVE-2017-3537

CVE-2017-3537 affects the Oracle Real-Time Scheduler component of Oracle Utilities Applications (Mobile Communications Platform) with affected versions 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. AFFECTED FUNCTION/FILE: Oracle Real-Time Scheduler (Mobile Communications Platform subcomponent). Root cause: vu...

CVE-2017-3306

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3595

The CVE-2017-3595 entry concerns Oracle WebCenter Sites within Oracle Fusion Middleware (subcomponent: Advanced UI). Affected versions are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise the system, ...

CVE-2017-3308

Summary of findings: CVE-2017-3308 affects Oracle MySQL Server (Server: DML) with affected branches 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability is exploitable over network with low privileges, and can result in a hang or frequent crash (complete DoS) of MySQL...

CVE-2017-3558

CVE-2017-3558 affects Oracle VM VirtualBox (Core) with builds prior to 5.0.38 and 5.1.20. The issue stems from a heap allocator (slirp) and header handling in VirtualBox’ networking code, where an attacker can corrupt a heap header via crafted IP/UDP/TCP input. Due to dropped asserts in release b...