PT-2017-15966

Name of the Vulnerable Software and Affected Versions Oracle Retail Warehouse Management System versions 13.2, 14.0, and 15.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person...

PT-2017-16003

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.1 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks can result in unauthorized creation, deletion, or...

PT-2017-16022

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Payables component, specifically the Self Service Manager subcomponent. It allows a high-privileged attacker with...

PT-2017-16019

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.1.41 and earlier Description The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors, resulting in unauthorized update, insert, or...

PT-2017-16010

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1, 16.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio...

PT-2017-15909

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0.1, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized creation,...

PT-2017-16004

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eBill Payment version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks can result in unauthorized...

CVE-2017-3515: Undefined Security Weakness

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: User Name/Password Management. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...

CVE-2017-3510: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3602: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-15937

Name of the Vulnerable Software and Affected Versions Oracle Primavera Products Suite versions 9.13, 9.14, 10.0, 10.1, 15.1, 15.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Primavera Unifier component. Successful attacks require human...

PT-2017-15993

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-15999

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a...

CVE-2017-3589: Undefined Security Weakness

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

CVE-2017-3477: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-15943

Name of the Vulnerable Software and Affected Versions Oracle Service Bus versions 12.1.3.0.0 through 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus, resulting in unauthorized access to some data, including update,...

PT-2017-15970

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

PT-2017-16020

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 2.1.5 and earlier Description A vulnerability in the MySQL Connectors component allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise it. Successful attacks ca...

CVE-2017-3577: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3454: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...