PT-2017-11265

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 6.9.9 and earlier Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, requiring human interaction from a person other than the...

PT-2017-11387

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.56 Description The issue affects the PeopleSoft Enterprise PT PeopleTools component, allowing a low-privileged attacker with network access via HTTP to compromise it. Successful attacks can result in...

PT-2017-11284

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM, requiring human interaction from a person other than the attacker. Successful...

CVE-2017-10398: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: BaseMasterPage. The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2017-10392: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10385: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10395: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: GangwayActivityWebApp. The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10401: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications subcomponent: MMSUpdater. The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2017-10417: Undefined Security Weakness

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: Setup and Configuration. Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-10372: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2017-11155

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise...

CVE-2017-10293: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Javadoc. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks...

PT-2017-11397

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.30 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in...

CVE-2017-10364: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Environment Mgmt. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11313

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in...

PT-2017-11389

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks can result in unauthorized update, insert,...

PT-2017-11337

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction fro...

PT-2017-11153

Name of the Vulnerable Software and Affected Versions Oracle Engineering Data Management versions 6.1.3.0 and 6.2.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Engineering Data Management. Successful attacks can result in unauthoriz...

PT-2017-11350

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a...

PT-2017-11357

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation component. Successful...