PT-2017-11220

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized update,...

PT-2017-11046

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications MICROS BellaVita version 2.7.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful attacks can result in unauthorized update, insert, ...

Oracle Retail Xstore Point of Service Remote Vulnerability (CNVD-2017-27178)

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Point of Service is one of the retail point of service management components. A security vulnerability exists in the Xstore Office subcomponent of the Retail Xstore Point of...

Unspecified Vulnerability in Oracle FLEXCUBE Private Banking

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...

Oracle FLEXCUBE Universal Banking Unauthorized Operation Vulnerability (CNVD-2017-24342)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Unspecified Vulnerability in Oracle Database Server (CNVD-2017-18568)

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. Oracle Database Server version 12.1.0.2 has a security vulnerability in the RDBMS Security implementation, which can be exploited by a...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-15387)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Corporation, of which Oracle Partner Management is a partner management component. A security vulnerability exists in the User Interface subcomponent of the Oracle Partner...

PT-2017-9354

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands via the "MultiReport" function. This can potentially lead to unauthorized data access or modification...

Oracle MySQL Server Unauthorized Modification Vulnerability (CNVD-2017-06387)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: Security: Encryption subcomponent of the MySQL Server component in Oracle MySQL, version 5.7.17 a...

Oracle VM VirtualBox Remote Vulnerability (CNVD-2017-06468)

Oracle Virtualization Oracle VirtualBox is a virtual machine component of Oracle's virtualization solution. A security vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization. An attacker could exploit this vulnerability to unauthorized creatio...

CVE-2017-3539

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

UBUNTU-CVE-2017-3589

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

PT-2017-15981

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Description The issue affects the PeopleSoft Enterprise PeopleTools component, specifically the MultiChannel Framework subcomponent. It allows an unauthenticated...

UBUNTU-CVE-2017-3468

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2017-15961

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Service Procurement version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Service Procurement. Successful attacks can result in...

PT-2017-16004

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eBill Payment version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks can result in unauthorized...

PT-2017-15909

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0.1, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized creation,...

PT-2017-15925

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing, resulting in unauthorized creation, deletio...

PT-2017-15946

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue affects the Kernel Zones virtualized NIC driver in the Solaris component, allowing a low-privileged attacker with network access via multiple protocols to compromise Solaris...