PT-2018-2393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to insufficient access control in the Oracle User Management component, allowing a high-privileged attacker with network access vi...

PT-2018-2404

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise Interaction Hub version 9.1.0.0 Description The issue is related to insufficient access control in the Application Portal component of PeopleSoft Enterprise Interaction Hub, allowing a low-privileged attacker with network...

PT-2018-2239

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing...

PT-2018-2240

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue is related to insufficient access control in the Oracle Applications Framework component of Oracle E-Business Suite. This can be exploited by a remot...

PT-2018-2370

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to insufficient access control in the Web Access component, allowing an unauthenticated attack...

PT-2018-2373

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to inadequate access control in the Web Access component, allowing an unauthenticated attacker...

PT-2018-2312

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications MICROS Retail-J versions 12.1.2 and 13.0.0 Description The issue is related to inadequate access control in the Back Office component of MICROS Retail-J, allowing an unauthenticated attacker with network access via...

PT-2018-2363

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.4 Description The issue is related to insufficient access control in the Hyperion Common Events component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with network acce...

PT-2018-2354

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 18.7 through 18.9 Description The issue is related to inadequate access control in the Siebel UI Framework component, specifically the UIF Open UI subcomponent. This allows an unauthenticated attacker with network...

PT-2018-2374

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated...

PT-2018-2479

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Oracle PeopleSoft Products version 8.57 Description The issue is related to insufficient access control in the Stylesheet component of Oracle PeopleSoft Enterprise...

PT-2018-2368

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the PeopleSoft Enterprise PeopleTools component, specifically the Portal subcomponent. It allows a...

PT-2018-2244

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 11.3 Description The issue is related to a vulnerability in the Remote Administration Daemon RAD component of the Solaris operating system, which is part of the Oracle Sun Systems Products Suite. This...

PT-2018-2274

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2477

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated...

PT-2018-2238

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to inadequate access control in the Oracle Applications Manager component of Oracle E-Business Suite. This can be exploited by a...

PT-2018-2264

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to inadequate access control in the Oracle Outside In Technology component, which can be exploited by a remote attacker to gain unauthorized access to...

PT-2018-2372

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 through 8.56 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated attacker with network...

MGASA-2018-0359 Updated mariadb packages fix security vulnerability

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: MyISAM. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this...

CVE-2018-11055

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 in 4.0.x and prior to 4.1.6.1 in 4.1.x, contains an Improper Clearing of Heap Memory Before Release 'Heap Inspection' vulnerability. Decoded PKCS 12 data in heap memory is not zeroized by MES before releasing the memory internally and a...