PT-2018-15946

Name of the Vulnerable Software and Affected Versions Oracle Construction and Engineering Suite Primavera Unifier component version 16.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera Unifier, resulting in unauthorized read access to a...

PT-2018-16002

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collatera...

PT-2018-16032

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle SOA Suite, resulting in unauthorized read access to a...

PT-2018-16031

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.9.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal, resulting in unauthorized read access to a subset ...

PT-2018-15923

Name of the Vulnerable Software and Affected Versions Java SE versions 6u191, 7u181, 8u172, and 10.0.1 Java SE Embedded version 8u171 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE or Java SE Embedded, resulting in...

PT-2018-15912

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.18 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit AK component, potentially impacting additional...

CVE-2018-2767: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2018-3039: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

PT-2018-15965

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue affects the Oracle iStore component, specifically the Shopping Cart subcomponent. It allows an unauthenticated...

CVE-2018-3029: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2018-15952

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2018-16001

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending, resulting in unauthorize...

PT-2018-16026

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue affects the Candidate Gateway subcomponent of the PeopleSoft HRMS component, allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. This can...

CVE-2018-3105: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Health Care FastPath. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network acce...

CVE-2018-3076: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products subcomponent: ISIR Processing. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

PT-2018-15914

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows a high-privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit AK executes to compromise it. Successful attacks can result ...

CVE-2018-2905: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromi...

CVE-2018-3038: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2923: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2921: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...