PT-2018-15621

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified Inventory Management versions 7.2.4.2.x through 7.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful...

PT-2018-15758

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Hedge Management and IFRS Valuations version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Hedge Management and IFRS Valuations...

PT-2018-15716

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...

PT-2018-15658

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.5 and 9.3.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker...

PT-2018-15676

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.5.0, 11.6.0, 11.7.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorize...

PT-2018-15711

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require huma...

PT-2018-15734

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Asset Liability Management versions 6.1.x through 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Asset Liability Management...

PT-2018-15739

Name of the Vulnerable Software and Affected Versions Oracle Database Server Application Express versions prior to 5.1.4.00.08 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Application Express, requiring human interaction from a person other...

PT-2018-15753

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Market Risk. Successful attacks require human interaction from a...

PT-2018-15755

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk Measurement and Management version 8.0.5 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Market Risk Measurement and Management...

PT-2018-15771

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Reconciliation Framework version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Financial Services Analytical Applications...

PT-2018-15646

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Dining Room Management version 8.0.78 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Dining Room Management. Successful attacks require...

PT-2018-15673

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Balance Sheet Planning version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Balance Sheet Planning. Successful attacks require hum...

PT-2018-15767

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Funds Transfer Pricing versions 6.1.x through 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Funds Transfer Pricing. Successful...

CVE-2018-2599

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...

PT-2017-3892

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Office version 7.1 Description The issue affects the Internal Operations component of Oracle Retail Xstore Office, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful attack...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2017-31848)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

CVE-2017-10033

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Support Tools. Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2017-10408

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

PT-2017-11302

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Common Applications Calendar component, allowing an unauthenticated attacker with network access via HTTP ...