CVE-2018-2579: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated...

PT-2018-15716

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...

PT-2018-15659

Name of the Vulnerable Software and Affected Versions Oracle Hyperion version 11.1.2.4.330 Description The issue affects the Hyperion Data Relationship Management component, specifically the Access and security subcomponent. It allows an unauthenticated attacker with network access via HTTP to...

PT-2018-15676

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.5.0, 11.6.0, 11.7.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorize...

PT-2018-15697

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54, 8.55, and 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a...

PT-2018-15753

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Market Risk. Successful attacks require human interaction from a...

PT-2018-15771

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Reconciliation Framework version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Financial Services Analytical Applications...

PT-2018-15625

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, and 12.2.0.1 Description The issue affects the Core RDBMS component of Oracle Database Server, allowing a high-privileged attacker with local logon privilege and network access via multiple...

PT-2018-15739

Name of the Vulnerable Software and Affected Versions Oracle Database Server Application Express versions prior to 5.1.4.00.08 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Application Express, requiring human interaction from a person other...

PT-2018-15677

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2, 6.4.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Transportation...

PT-2018-15614

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 11.1.1.9.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the...

CVE-2018-2625: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-15717

Name of the Vulnerable Software and Affected Versions Java Advanced Management Console version 2.8 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java Advanced Management Console, resulting in unauthorized read access to a subset ...

CVE-2018-2631: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low...

CVE-2018-2632: Undefined Security Weakness

Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM subcomponent: Siebel Approval Manager. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2018-2675: Undefined Security Weakness

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2018-2581: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2018-2653: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Connected Query. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2610: Undefined Security Weakness

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion...

CVE-2018-2588: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: LDAP. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with...