PT-2018-15897

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks requi...

PT-2018-15900

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require...

PT-2018-15898

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 12.2.0 through 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person othe...

PT-2018-15931

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, requiring human interaction from a person other than the...

CVE-2018-3043: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

PT-2018-9448

Name of the Vulnerable Software and Affected Versions Trovebox versions prior to 4.0.0-rc6 after commit 742b8ed contains the fix, implying versions up to 4.0.0-rc6 are affected Description The issue is related to a Server-Side request forgery vulnerability in the webhook component. This can lead ...

OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications subcomponent: Fleet Management System Suite. The supported version that is affected is 9.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2018-15779

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, and 14.0.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human...

PT-2018-15773

Name of the Vulnerable Software and Affected Versions Oracle Retail Returns Management versions 2.3.8, 2.4.9, 14.0.4, and 14.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Returns Management. Successful attacks can result in...

PT-2018-15867

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Basel Regulatory Capital Basic version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Basic. Successful...

PT-2018-15777

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks can result in...

PT-2018-15824

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 11.5.0, 11.6.0, and 11.7.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks require human interaction fro...

PT-2018-15826

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54, 8.55, and 8.56 Description The issue affects the Fluid Homepage & Navigation subcomponent of Oracle PeopleSoft Products, allowing an unauthenticated attacker with network access via HTTP to...

PT-2018-15865

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks can result in unauthorized updat...

PT-2018-15805

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

CVE-2018-2812

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2018-2642

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: File Upload. Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus...

CVE-2018-2660

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2562

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocol...