CVE-2018-2588: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: LDAP. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with...

PT-2018-15637

Name of the Vulnerable Software and Affected Versions Java SE versions 6u171, 7u161, 8u152 and 9.0.1 Java SE Embedded version 8u151 JRockit version R28.3.16 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded,...

PT-2018-15672

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server, resulting in unauthorized read access to a subset of...

PT-2018-15629

Name of the Vulnerable Software and Affected Versions Java SE versions 6u171, 7u161, 8u152 and 9.0.1 Java SE Embedded version 8u151 JRockit version R28.3.16 Description A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02269)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

PT-2018-2403

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 10.3.6.0 Description The issue is related to insufficient access control in the WLS - Web Services component of Oracle WebLogic Server, allowing a remote attacker to access protected information via HTTP. This ca...

PT-2018-2406

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component. It can be exploited by a remote attacker ...

PT-2018-2412

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology software development kit SDK. This can be exploit...

PT-2018-2413

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology software development kit SDK. This can be exploit...

PT-2018-2414

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access control in the Outside In Filters component of the Oracle Outside In Technology software development kit SDK. This can be exploit...

PT-2017-3893

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1, 18c, and 19c Description The issue is related to a vulnerability in the Core RDBMS component of Oracle Database Server, which can be easily exploited by a low-privileged attacker with Create Session...

PT-2017-11257

Name of the Vulnerable Software and Affected Versions Oracle Tuxedo versions 11.1.1, 12.1.1, 12.1.3, 12.2.2 Description The issue allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo, resulting in unauthorized read access to a subset of Oracle Tuxedo...

CVE-2017-10266: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise FSCM Component (CNVD-2017-31847)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. An...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2017-31848)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

CVE-2017-10426

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-10277

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2017-10392

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

PT-2017-11034

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0 and 12.2.1.2.0 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks...

PT-2017-11311

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebLogic Server, resulting in unauthorized read access to a...