CVE-2017-10098: Improper Privilege Management

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

CVE-2017-10132: Undefined Security Weakness

Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/iOS. The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile...

PT-2017-11077

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suites Management version 3.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suites Management. Successful attacks require human interaction from a pers...

CVE-2017-10061: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-11248

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11192

Name of the Vulnerable Software and Affected Versions Oracle Hospitality e7 version 4.2.1 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7. Successful attacks can result in...

PT-2017-10972

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...

PT-2017-10980

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...

PT-2017-11069

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interactio...

PT-2017-11080

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.5 through 9.3.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the...

PT-2017-11086

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.5 through 9.3.6 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks can result in unauthorize...

PT-2017-11098

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11120

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel versions 10 and 11 Description The issue allows a high-privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. This is a difficult to exploit...

PT-2017-11129

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 1.1 Description The issue affects the Hospitality Hotel Mobile component, specifically the Suite8/RestAPI subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise...

PT-2017-11143

Name of the Vulnerable Software and Affected Versions Oracle Primavera Products Suite versions 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1, and 16.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Primavera Unifier component. Successful attacks c...

PT-2017-11207

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11213

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality RES 3700 executes to compromise it. Successful attacks require human interaction fr...

PT-2017-11217

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows physical access to compromise Oracle Hospitality RES 3700, potentially impacting additional products. Successful attacks can result in unauthorized access to critical data,...

PT-2017-11239

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11214

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Materials Control versions 8.31.4 through 8.32.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks can result in...