PT-2018-16012

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2018-15900

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require...

PT-2018-15912

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.18 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit AK component, potentially impacting additional...

CVE-2018-2955: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: Integration. The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-15904

Name of the Vulnerable Software and Affected Versions Oracle Communications EAGLE LNP Application Processor version 10.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Communications EAGLE LNP Application Processor. Successful attack...

CVE-2018-2975: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

PT-2018-16032

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle SOA Suite, resulting in unauthorized read access to a...

PT-2018-16001

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending, resulting in unauthorize...

CVE-2018-3039: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

PT-2018-16027

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Financial Aid versions 9.0 and 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Financial Aid, resulting in unauthorized read access to a...

PT-2018-15917

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue affects the HTTP data path subsystems of the Sun ZFS Storage Appliance Kit AK component, allowing a low-privileged attacker with network access via HTTP to...

PT-2018-15905

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows an unauthenticated attacker with network access via SSL/TLS to compromise the Sun ZFS Storage Appliance Kit AK, resulting in unauthorized read access to a...

CVE-2018-3029: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2018-3082: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3056: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

PT-2018-15906

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue affects the Hardware Management Pack component, specifically the Ipmitool subcomponent. It allows an unauthenticated attacker with network access via IPMI to compromise the...

PT-2018-16026

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue affects the Candidate Gateway subcomponent of the PeopleSoft HRMS component, allowing an unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. This can...

CVE-2018-3105: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Health Care FastPath. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network acce...

CVE-2018-3038: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2921: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...