CVE-2017-10306: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...

CVE-2017-10368: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. Supported versions that are affected are 9.1.00 and 9.2.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-15900

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management, requiring human interaction fr...

PT-2017-11150

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54, 8.55, and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction...

CVE-2017-10341: Undefined Security Weakness

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2017-11304

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2017-11337

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction fro...

PT-2017-11317

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 2.8 and 2.9 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other...

CVE-2017-10397: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: BaseMasterPage. The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10364: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Environment Mgmt. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10166: Undefined Security Weakness

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware subcomponent: C Oracle SSL API. Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromis...

CVE-2017-10394: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSof...

PT-2017-11277

Name of the Vulnerable Software and Affected Versions Java SE versions 6u161, 7u151, 8u144 and 9 Java SE Embedded version 8u144 JRockit version R28.3.15 Description A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE...

CVE-2017-10274: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Smart Card IO. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

CVE-2017-10365: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-10375: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2017-11376

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.30 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in...

PT-2017-11389

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8. Successful attacks can result in unauthorized update, insert,...

PT-2017-11296

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8, resulting in unauthorized read access to a subset of Oracle...

CVE-2017-10382: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...