CVE-2017-10220

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications subcomponent: Parser. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Property...

CVE-2017-10202

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to...

CVE-2017-10042

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: IKE. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via IKE to compromise Solaris. Successful attacks of this...

CVE-2017-10079

CVE-2017-10079 affects Oracle Hospitality Applications’ Hospitality Suites Management component (Core) in version 3.7. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Suites Management, with attacks requiring human interaction. Potential impact incl...

CVE-2017-10078

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Scripting. The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2017-10189

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Suite8 executes to...

CVE-2017-10004

CVE-2017-10004 concerns the Solaris kernel in Oracle Sun Systems Products Suite, affecting Solaris 10 and 11. The evidence (NVD description and Nessus plugin entries) indicates a vulnerability in the Kernel subcomponent that allows a high-privileged user with logon to compromise Solaris, with the...

CVE-2017-10217

An Oracle Hospitality CVE-2017-10217 vulnerability affects Oracle Hospitality Guest Access (Base) in Oracle Hospitality Applications, specifically versions 4.2.0.0 and 4.2.1.0. The issue allows a low-privileged user with network access over HTTP to remotely modify certain Oracle Hospitality Guest...

CVE-2017-10248

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10147

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2017-10147

CVE-2017-10147 affects Oracle WebLogic Server (Fusion Middleware Core Components). Affected installations include Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. The issue allows an unauthenticated attacker with network access via the T3 protocol to compromise the WebLo...

CVE-2017-10086

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

CVE-2017-10053

CVE-2017-10053 is an OpenJDK/OpenJDK 2D JPEGImageReader vulnerability. The issue affects Java SE components (Java SE, Java SE Embedded, JRockit) with affected versions including Java 6u151, 7u141, 8u131 (and 8u131 for Java SE Embedded; JRockit R28.3.14). The vulnerability could allow an unauthent...

CVE-2017-10210

CVE-2017-10210 affects Oracle VM VirtualBox (Core) via the VMSVGA path. A concrete root cause described in connected material is an integer overflow in SVGA3D_CMD surface handling (vmsvga3dSurfaceDefine) that can cause memory corruption and a subsequent crash or crash-driven state. The adverse ef...

CVE-2017-3645

CVE-2017-3645 affects Oracle MySQL Server, subcomponent Server: Optimizer. Affected versions are 5.7.18 and earlier. Vulnerability can be exploited remotely over multiple protocols by a high-privilege attacker to cause a hang or repeated crash (DOS). Remediation seen in connected docs indicates u...

CVE-2017-3651

CVE-2017-3651 affects Oracle MySQL Server’s Client mysqldump component. Affected releases include 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier. The issue is described in multiple advisories as a vulnerability that enables a low-privileged, network-accessing attacker to perform u...

CVE-2017-10236

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-3643

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-10101

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-10110

Vulnerability in the Java SE component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attac...