CVE-2017-10301: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2658: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

PT-2018-15709

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Labor Management versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Labor Management. Successful attacks can result in unauthorized...

PT-2018-15693

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.4.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorized...

CVE-2018-2630: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged attacker with network...

PT-2018-15738

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks can result in...

PT-2018-15747

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0 through 12.4.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks can result in unauthorized...

CVE-2018-2602: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: I18n. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the...

CVE-2018-2716: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2717: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: SPARC Platform. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2018-2719: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

CVE-2018-2731: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2649: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...

CVE-2018-2725: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network acces...

CVE-2018-2647: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-2726: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2018-15705

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 7.3.5.x through 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human...

PT-2018-15706

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Transportation Management...

PT-2018-15769

Name of the Vulnerable Software and Affected Versions Oracle Retail Merchandising System version 16.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Retail Merchandising System. Successful attacks can result in unauthorized update,...

PT-2018-15703

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a person...