PT-2017-11062

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized...

PT-2017-11217

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows physical access to compromise Oracle Hospitality RES 3700, potentially impacting additional products. Successful attacks can result in unauthorized access to critical data,...

PT-2017-11098

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-11188

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in the ability to cause a hang or...

PT-2017-11067

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 6.1.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Payment Interface component, resulting in unauthorized access to critical data or comple...

CVE-2017-10057: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Discussion Forum. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2017-11045

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1 Description The issue affects the Web Access component of Oracle Primavera Products Suite, allowing a low-privileged attacker with network access via HTTP...

CVE-2017-10181: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Forgot Password. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11141

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized...

PT-2017-11130

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks require human interaction from a person other than the...

PT-2017-11173

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 through 12.0.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...

PT-2017-11214

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Materials Control versions 8.31.4 through 8.32.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks can result in...

CVE-2017-10012: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Operations. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

PT-2017-10968

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human...

PT-2017-10985

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

PT-2017-11206

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service versions 6.0.x through 7.1.x Oracle Retail Xstore Point of Service versions 15.0.x Oracle Retail Xstore Point of Service version 16.0.0 Description The issue allows an unauthenticated attacker with network...

CVE-2017-10002: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications subcomponent: Settings and Config. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11213

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.5 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality RES 3700 executes to compromise it. Successful attacks require human interaction fr...

PT-2017-11221

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Materials Management version 7.30.562 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Materials Management. Successful attacks can result in...

PT-2017-11249

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...