CVE-2017-10392: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10270: Undefined Security Weakness

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10163: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web General. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attack...

PT-2017-11299

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Common Applications Calendar component, allowing an unauthenticated attacker with network access via HTTP ...

CVE-2017-10385: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10418: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PeopleSoft CDA. The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-10982

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Hotel Mobile version 1.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Hotel Mobile, requiring human interaction from a person other than the attacker...

CVE-2017-10014: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10033: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Support Tools. Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

PT-2017-11387

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.56 Description The issue affects the PeopleSoft Enterprise PT PeopleTools component, allowing a low-privileged attacker with network access via HTTP to compromise it. Successful attacks can result in...

PT-2017-11350

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a...

CVE-2017-10077: Undefined Security Weakness

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: AD Utilities. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...

PT-2017-11348

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks can result in unauthorized...

CVE-2017-10295: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker...

CVE-2017-10293: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Javadoc. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks...

CVE-2017-10315: Undefined Security Weakness

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

PT-2017-11155

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise...

CVE-2017-10352: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

PT-2017-11153

Name of the Vulnerable Software and Affected Versions Oracle Engineering Data Management versions 6.1.3.0 and 6.2.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Engineering Data Management. Successful attacks can result in unauthoriz...

PT-2017-11265

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 6.9.9 and earlier Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, requiring human interaction from a person other than the...