PT-2018-15992

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing, resulting in unauthorized re...

CVE-2018-3055: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-2969: Undefined Security Weakness

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Core. The supported version that is affected is 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successfu...

CVE-2018-2963: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...

PT-2018-15906

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue affects the Hardware Management Pack component, specifically the Ipmitool subcomponent. It allows an unauthenticated attacker with network access via IPMI to compromise the...

CVE-2018-3072: Undefined Security Weakness

Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products subcomponent: Candidate Gateway. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft HRMS. Successful...

PT-2018-15938

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.x, 16.x, 17.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management...

PT-2018-15647

Name of the Vulnerable Software and Affected Versions MySQL Workbench versions 6.3.10 and earlier Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench, resulting in unauthorized read access to a subset of MySQL Workbench...

UBUNTU-CVE-2018-2767

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

PT-2018-15984

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 12.2.0 through 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments, resulting in unauthorized read access to a subset of accessible...

PT-2018-16023

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.0.0 Description The issue allows a high privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process, resulting in...

CVE-2018-3056: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2940: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2018-15904

Name of the Vulnerable Software and Affected Versions Oracle Communications EAGLE LNP Application Processor version 10.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Communications EAGLE LNP Application Processor. Successful attack...

PT-2018-16007

Name of the Vulnerable Software and Affected Versions Oracle Banking Corporate Lending versions 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks can...

PT-2018-15901

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2018-15905

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.20 Description The issue allows an unauthenticated attacker with network access via SSL/TLS to compromise the Sun ZFS Storage Appliance Kit AK, resulting in unauthorized read access to a...

PT-2018-15908

Name of the Vulnerable Software and Affected Versions Oracle Hyperion version 11.1.2.4.330 Description The issue affects the Hyperion Data Relationship Management component, specifically the Access and security subcomponent. It allows an unauthenticated attacker with network access via HTTPS to...

PT-2018-15917

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.18 Description The issue affects the HTTP data path subsystems of the Sun ZFS Storage Appliance Kit AK component, allowing a low-privileged attacker with network access via HTTP to...

PT-2018-15941

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.x, and 16.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management, resulting...