CVE-2014-9680

CVE-2014-9680 : sudo before 1.8.12 fails to sanitize the TZ environment variable, allowing a local attacker to bypass restrictions and potentially cause a denial of service or read/open unauthorized files via a sudo session. Connected advisories/docs corroborate local-execution impact and recomme...

PT-2017-16028

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites, resulting in unauthorized read access to a...

CVE-2017-3490: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2017-3495: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

PT-2017-15906

Name of the Vulnerable Software and Affected Versions MySQL Workbench versions 6.3.8 and earlier Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench, resulting in unauthorized read access to a subset of MySQL Workbench...

CVE-2016-5551: Improper Access Control

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

PT-2017-15953

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, resulting in unauthorized read access to a subset of accessib...

PT-2017-15910

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0.1, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized read access to ...

PT-2017-15969

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require...

PT-2017-15927

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 through 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2017-15932

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 through 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from...

PT-2017-15962

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue affects the Fluid Core subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2017-16030

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites, resulting in unauthorized read access to a...

PT-2017-8737

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 4.3 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster, resulting in unauthorized read access to a...

PT-2017-15929

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 and 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Managemen...

PT-2017-15934

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel version 11.3 Description The issue allows a low-privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris, resulting in unauthorized read access to ...

PT-2017-15994

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.5.1.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services, resulting in...

CVE-2017-3535: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3560: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OXI Interface. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows low privileged...

CVE-2017-3527: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...