CVE-2017-3306: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...

CVE-2017-3592: Undefined Security Weakness

Vulnerability in the Oracle Payables component of Oracle E-Business Suite subcomponent: Self Service Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows high privileged attacker with network access...

PT-2017-16020

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 2.1.5 and earlier Description A vulnerability in the MySQL Connectors component allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise it. Successful attacks ca...

CVE-2017-3554: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...

PT-2017-16004

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM eBill Payment version 9.2 Description The issue allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eBill Payment. Successful attacks can result in unauthorized...

PT-2017-15971

Name of the Vulnerable Software and Affected Versions Oracle Utilities Applications subcomponent: Mobile Communications Platform versions 2.2.0.3.13, 2.3.0.0, and 2.3.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Real-Time...

PT-2017-16008

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue affects the PeopleSoft Enterprise CS Campus Community component, allowing a high-privileged attacker with network access via HTTP to compromise the system. Successful attacks can...

CVE-2017-3477: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3482: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged...

CVE-2017-3501: Undefined Security Weakness

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite subcomponent: Platform. Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3547: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3532: Undefined Security Weakness

Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 14.0 and 15.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3520: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3484: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

PT-2017-15951

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle User Management component, specifically the User Name/Password Management subcomponent. It allows an unauthenticated attacker...

PT-2017-15916

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0.1, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in...

PT-2017-15979

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can result in...

PT-2017-15988

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can result in...

PT-2017-15943

Name of the Vulnerable Software and Affected Versions Oracle Service Bus versions 12.1.3.0.0 through 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus, resulting in unauthorized access to some data, including update,...

CVE-2017-3528: URL Redirection to Untrusted Site

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc.. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated...