CVE-2018-2973: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JSSE. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2018-15915

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue allows a high privileged attacker with logon to the infrastructure where Sun ZFS Storage Appliance Kit AK executes to compromise it. Successful attacks can result ...

CVE-2018-2888: Undefined Security Weakness

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...

PT-2018-15911

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2018-3035: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

PT-2018-15918

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

PT-2018-15957

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE...

PT-2018-15960

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management System version 9.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized creation, deletion, or...

PT-2018-15986

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 12.2.0 through 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks can result in unauthorized update, insert, or...

PT-2018-15995

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result ...

PT-2018-16000

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2018-15950

Name of the Vulnerable Software and Affected Versions Java SE versions 6u191, 7u181, 8u172, 10.0.1 Java SE Embedded version 8u171 Description A difficult to exploit vulnerability allows an unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful...

PT-2018-15975

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue affects the Web Runtime subcomponent of Oracle JD Edwards EnterpriseOne Tools, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24121)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Core subcomponent of the Primavera Unifier versi...

CVE-2018-2920: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols ...

PT-2018-15897

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks requi...

PT-2018-15987

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 12.2.0, 12.3.0, 12.4.0, 12.5.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks can result in unauthorized...

CVE-2018-2904: Undefined Security Weakness

Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications subcomponent: GUI. The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24120)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Core subcomponent of the Primavera Unifier versi...

CVE-2018-2900: Undefined Security Weakness

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Layout Tools. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of...