CVE-2017-3240: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where RDBMS Security executes to compromise...

CVE-2017-3319: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: X Plugin. Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2017-3296: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-8732

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1, 12.0.2, 12.0.4, 12.1.0, and 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing, resulting in...

PT-2017-9608

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from ...

PT-2017-8739

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized read access to a subset ...

PT-2017-9600

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 Description The issue allows physical access to compromise Oracle FLEXCUBE Universal Banking, requiring human interaction from a person other tha...

PT-2017-9597

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, and 12.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking, resultin...

PT-2017-9598

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful...

PT-2017-9609

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking, resulting in unauthorized read access to a subset of...

PT-2017-9617

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks can result in unauthorized update,...

PT-2017-9618

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking, resulting in unauthorized read access to a subset of...

PT-2017-15721

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...

PT-2017-15719

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle GlassFish Server executes to compromise Oracle GlassFish Server. Successful attacks ca...

PT-2017-15759

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 10.0.3.5, 10.2.0.5, 11.2.0.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Commerce Platform, requiring human interaction from a person other th...

PT-2017-15775

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM ePerformance version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance, resulting in unauthorized read access to a subset of...

PT-2017-1145

Name of the Vulnerable Software and Affected Versions Oracle Database Server version 12.1.0.2 Description The issue is related to the RDBMS Security component of Oracle Database Server, where an easily exploitable vulnerability allows a low-privileged attacker with local logon privilege to...

PT-2017-15727

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.1.7.0 through 12.2.1.2.0 Description The issue affects the Oracle JDeveloper component of Oracle Fusion Middleware, specifically the ADF Faces subcomponent. It allows an unauthenticated attacker with network...

PT-2017-9602

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, and 12.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking,...

PT-2017-9616

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking, resulting in unauthorized read access to a subset of...