PT-2018-15866

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony First Edition versions 1.6 and 1.7 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks can result in...

PT-2018-15833

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54, 8.55, and 8.56 Description The issue affects the Fluid Core subcomponent of Oracle PeopleSoft Products, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2018-15865

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0 through 4.2.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks can result in unauthorized updat...

PT-2018-15871

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.7.17 Description The issue affects the HTTP data path subsystems component of the Sun ZFS Storage Appliance Kit AK, allowing an unauthenticated attacker with network access via HTTP to...

PT-2018-15878

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Consolidation Hierarchy Viewer subcomponent of Oracle General Ledger, allowing an unauthenticated attacker with...

PT-2018-15881

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Human Resources component, specifically the General Utilities subcomponent. It allows an unauthenticated...

PT-2018-15806

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM version 17.0 Description The issue affects the Siebel Core - Server Framework component, allowing a low-privileged attacker with network access via HTTP to compromise the framework. This can result in unauthorized read access...

PT-2018-15886

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Account Hierarchy Manager subcomponent of Oracle General Ledger, allowing an unauthenticated attacker with networ...

PT-2018-15880

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Application Object Library component, specifically the Diagnostics subcomponent. It allows an unauthenticated attacker wit...

PT-2018-15844

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.36 Oracle VM VirtualBox versions prior to 5.2.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2018-15877

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Application Object Library component, specifically the Diagnostics subcomponent. It allows an unauthenticated attacker wit...

CVE-2018-2868: Undefined Security Weakness

Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Solaris has an information disclosure vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component in Oracle Sun...

CVE-2018-2820: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2865: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2018-2864: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Diagnostics. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2018-2873: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker wit...

CVE-2018-2869: Undefined Security Weakness

Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2018-2866: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2018-2831: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...