CVE-2017-3571

Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3565

CVE-2017-3565 affects Oracle Solaris 11.3, under the RBAC component. The connected sources describe a local, low-privilege vulnerability in Solaris 11.3 that allows an attacker with logon access to compromise Solaris, with attacks requiring user interaction and potentially leading to unauthorized...

CVE-2017-3459

CVE-2017-3459 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions include 5.7.17 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server, potentially causing a han...

CVE-2017-3495

Oracle FLEXCUBE Direct Banking (Pre-Login) vulnerability CVE-2017-3495 exists in Oracle Financial Services Applications. Connected sources corroborate affected versions 12.0.2 and 12.0.3 and describe an unauthenticated, network-accessible issue via HTTP in the Pre-Login subcomponent that can lead...

CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2017-3460

CVE-2017-3460 affects Oracle MySQL Server (Server: Audit Plug-in). Affected: MySQL 5.7.17 and earlier. Issue: high-privilege attacker can authenticate via network and cause a hang or complete DoS of MySQL Server. Mitigation: apply vendor-supplied fixes by upgrading to a version with the CP update...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3465

CVE-2017-3465 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Affected versions: 5.7.17 and earlier. An attacker with network access via multiple protocols and with low privileges can exploit this to perform unauthorized updates, inserts, or delete...

CVE-2017-3575

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3306

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...

CVE-2017-3592

Vulnerability in the Oracle Payables component of Oracle E-Business Suite subcomponent: Self Service Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows high privileged attacker with network access...

CVE-2017-3475

CVE-2017-3475 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous). According to the sources, affected versions are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to impact availability, enabling a p...

CVE-2017-3331

CVE-2017-3331 affects Oracle MySQL Server (subcomponent: Server: DML). Affects MySQL 5.7.11–5.7.17; exploitation via multiple network protocols by a low-privileged user can cause a hang or frequent crashes (DoS). Remediation references indicate an update path; Red Hat advisory RHSA-2017:2886 note...

CVE-2017-3578

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3546

CVE-2017-3546 affects Oracle PeopleSoft Tools (MultiChannel Framework), specifically SSRF in IMServlet for ToolsRelease 8.55.x (ToolsReleaseDB 8.55; HCM 9.2). Connected docs show SSRF allows remote attacker over network to cause cross-site requests, enabling potentially unauthorized access or por...

CVE-2017-3587

CVE-2017-3587 refers to a vulnerability in the Shared Folder subcomponent of Oracle VM VirtualBox. Affected product versions are VirtualBox prior to 5.0.38 and prior to 5.1.20. An attacker with low privileges and local logon can exploit this to gain unauthorized creation, deletion or modification...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3581

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...