CVE-2017-3362

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3362

CVE-2017-3362 affects Oracle E-Business Suite Knowledge Management (User Interface) in 12.1.1–12.1.3. The vulnerability allows an unauthenticated, network-accessible attacker to compromise Knowledge Management via HTTP, with human interaction required for exploitation; attacks may impact addition...

CVE-2017-3365

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3366

CVE-2017-3366 affects Oracle Knowledge Management in Oracle E-Business Suite (subcomponent: User Interface). Affected versions are 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management, with human interaction req...

CVE-2017-3363

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3366

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3363

CVE-2017-3363 is a vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Affected versions are 12.1.1, 12.1.2, and 12.1.3. The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Manag...

CVE-2017-3364

CVE-2017-3364 affects Oracle E-Business Suite’s Oracle Knowledge Management (UI subcomponent). Affected versions are 12.1.1, 12.1.2 and 12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Knowledge Management. While exploitation requires...

CVE-2017-3365

CVE-2017-3365 affects Oracle E-Business Suite Knowledge Management (UI) in versions 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can compromise Knowledge Management, with human interaction required to execute the attack. Consequences include unauthorized access to data ...

CVE-2017-3362

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3363

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3367

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3367

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2017-3367

The CVE-2017-3367 entry concerns Oracle Knowledge Management (Oracle E-Business Suite) with affected versions 12.1.1, 12.1.2, and 12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Knowledge Management; successful exploitation requires human in...

CVE-2017-3366

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2016-1919

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...

Knowledge vulnerable to cross-site request forgery

Overview Knowledge provided by support-project.org is an open-source knowledge base platform. Knowledge contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Software Update...

JVN#09460804: Knowledge vulnerable to cross-site request forgery

Knowledge provided by support-project.org is an open-source knowledge base platform. Knowledge contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Software Update to the...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00651)

Oracle E-Business Suite E-Business Suite is a fully integrated set of Oracle's global business management software. Oracle Knowledge Management is one of the knowledge management components. A remote vulnerability exists in the Oracle Knowledge Management component of Oracle E-Business Suite. An...

Oracle E-Business Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple unspecified vulnerabilities in multiple components and subcomponents, the most severe of which can allow an unauthenticated, remote...