CVE-2017-10334: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-11354

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized read access to a subset...

PT-2017-11186

Name of the Vulnerable Software and Affected Versions Oracle Integrated Lights Out Manager ILOM versions prior to 3.2.6 Description The issue allows a high-privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager ILOM, resulting in unauthorized read acce...

PT-2017-11283

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM, requiring human interaction from a person other than the attacker. Successful...

CVE-2017-10319: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2017-11156

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11279

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.5 through 9.3.6 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Agile PLM, resulting in unauthorized read access to a subset of Oracle Agile PLM accessible...

PT-2017-11295

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Suite8, requiring human interaction from a person other than the...

PT-2017-11301

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Applications Technology Stack component, resulting i...

PT-2017-11314

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Suite8, resulting in unauthorized read access to a subset of Oracle...

PT-2017-11335

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks can result in unauthorized update,...

CVE-2017-10317: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2017-10331: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Diagnostics. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2017-10362: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Sawbridge. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10299: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2017-10426: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10154: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2017-10164: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-11280

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 16.0 and 17.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Siebel CRM Desktop component, resulting in unauthorized read access to a subset of accessible data...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...