CVE-2017-10244: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Attachments. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

PT-2017-11205

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.10.x Description A vulnerability in the Hospitality Suite8 component allows an unauthenticated attacker with logon to the infrastructure to compromise the system. This can result in unauthorized read...

PT-2017-11023

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized read access to a...

PT-2017-11123

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11171

Name of the Vulnerable Software and Affected Versions Application Management Pack for Oracle E-Business Suite versions 12.1.0.4.0 and 13.1.1.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Application Management Pack for Oracle E-Busines...

PT-2017-11200

Name of the Vulnerable Software and Affected Versions Oracle Hospitality e7 version 4.2.1 Description The issue allows a low-privileged attacker with network access via SMTP to compromise Oracle Hospitality e7, resulting in unauthorized read access to a subset of Oracle Hospitality e7 accessible...

PT-2017-11115

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console, resulting in unauthorized read access to a subset of Java Advanc...

PT-2017-11184

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle iStore component, specifically the Shopping Cart subcomponent. It allows an unauthenticated attacker with network...

CVE-2017-10175: Undefined Security Weakness

Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: Profiles. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10022: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Operations. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-10160: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

PT-2017-11210

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0.0 through 4.2.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized read access to a subs...

CVE-2017-10007: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10008: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

PT-2017-11236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle Application Object Library component, specifically the Attachments subcomponent. It allows an unauthenticated attacker with...

CVE-2017-10243: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAX-WS. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with...

PT-2017-11212

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.10.x Description The issue affects the Hospitality Property Interfaces component, specifically the Parser subcomponent. It allows an unauthenticated attacker with logon access to the infrastructure to...

CVE-2017-10213: Undefined Security Weakness

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Suite8 executes to...

PT-2017-11246

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of PeopleSoft Enterprise FS...

CVE-2017-10184: Undefined Security Weakness

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless/WAP. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via...