PT-2017-16010

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1, 16.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio...

PT-2017-16035

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise it. This requires human interacti...

PT-2017-16040

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise it. This requires human interacti...

PT-2017-16042

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure to compromise Data Store. This requires human interaction from a person...

CVE-2017-3535: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3254: Undefined Security Weakness

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail...

CVE-2017-3611: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

PT-2017-15769

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor versions 3.1.6.8003 and earlier MySQL Enterprise Monitor versions 3.2.1182 and earlier MySQL Enterprise Monitor versions 3.3.2.1162 and earlier Description The issue allows a high privileged attacker with network acces...

PT-2017-16036

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise it. This requires human interacti...

CVE-2017-3509: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

CVE-2017-3573: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows unauthenticated...

CVE-2017-3605: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3608: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3597: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-15951

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle User Management component, specifically the User Name/Password Management subcomponent. It allows an unauthenticated attacker...

CVE-2017-3511

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to th...

PT-2017-16032

Name of the Vulnerable Software and Affected Versions Oracle Berkeley DB versions prior to 6.2.32 Description The issue affects the Data Store component, allowing an unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise it. This requires human interacti...

PT-2017-15984

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue affects the Oracle Customer Interaction History component, specifically the Admin Console subcomponent. It allows an unauthenticated attacker with network access via...

PT-2017-15970

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2017-3612: Undefined Security Weakness

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...