PT-2017-11034

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0 and 12.2.1.2.0 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks...

PT-2017-11318

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console, resulting in unauthorized update, insert, or delet...

PT-2017-11283

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM, requiring human interaction from a person other than the attacker. Successful...

PT-2017-11353

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue affects the PeopleSoft Enterprise PeopleTools component, specifically the PIA Core Technology...

PT-2017-11274

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 Description The issue affects the RDBMS Security component of Oracle Database Server, allowing a high-privileged attacker with Create User privilege and logon access to the...

PT-2017-11335

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks can result in unauthorized update,...

PT-2017-11345

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eProcurement versions 9.1.00 and 9.2.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks require human...

PT-2017-11351

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.7 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Java Advanced Management Console. Successful attacks require human interaction from a person other...

PT-2017-11350

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks require human interaction from a...

CVE-2017-10420: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2017-11331

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub, requiring human interaction from a...

PT-2017-11315

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.00 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub, requiring human interaction from a...

PT-2017-11151

Name of the Vulnerable Software and Affected Versions Oracle Communications Policy Management versions 11.5 and 12.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human...

PT-2017-11344

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 2.8 and 2.9 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other...

PT-2017-11366

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks require human...

Oracle MySQL Server Unauthorized Operation Vulnerability (CNVD-2017-32211)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: InnoDB subcomponent of the MySQ...

CVE-2017-10214

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

CVE-2017-10211

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hospitality Suite8. Successf...

CVE-2017-3653

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...