CVE-2017-10331: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Diagnostics. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2017-10362: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Sawbridge. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10299: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2017-10426: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10154: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2017-10164: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-11280

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 16.0 and 17.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Siebel CRM Desktop component, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11354

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized read access to a subset...

PT-2017-11308

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Application Object Library component, specifically the Diagnostics subcomponent. It allows an unauthenticated attacker wit...

CVE-2017-10194: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10318: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10361: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC DRS. The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-10383: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Interface. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2017-11395

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue affects the Staffing Front Office subcomponent, allowing a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. This can result in...

PT-2017-11339

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2017-11273

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...

Oracle OIT IX SDK libvs_pdf Kids List Information Leak(CVE-2016-3574)

DESCRIPTION When parsing a specially crafted PDF document, the parser is expecting a pointer where string is located leading to a read access violation with a controlled source operand. TESTED VERSIONS Oracle Outside In IX SDK 8.5.1 PRODUCT URLs...

CVE-2016-4924

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

PT-2017-8608

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 15.1 prior to 15.1F5 Juniper Networks Junos OS versions 14.1 prior to 14.1R8 Description An issue in Juniper Networks Junos OS on vMX allows local unprivileged users on a host system to have read access to vM...