CVE-2017-3517: Undefined Security Weakness

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

PT-2017-15911

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris, resulting in unauthorized read access to a subset of Solaris...

PT-2017-15969

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require...

PT-2017-15917

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, and 12.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human...

PT-2017-15927

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 through 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2017-15932

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 through 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from...

PT-2017-15934

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel version 11.3 Description The issue allows a low-privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris, resulting in unauthorized read access to ...

PT-2017-15953

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, resulting in unauthorized read access to a subset of accessib...

PT-2017-15962

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue affects the Fluid Core subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2017-15966

Name of the Vulnerable Software and Affected Versions Oracle Retail Warehouse Management System versions 13.2, 14.0, and 15.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person...

PT-2017-15986

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.5.1.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services, resulting in...

PT-2017-16030

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites, resulting in unauthorized read access to a...

PT-2017-15933

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 and 12.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2017-8737

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 4.3 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster, resulting in unauthorized read access to a...

PT-2017-15994

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.5.1.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services, resulting in...

PT-2017-15929

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 and 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Managemen...

PT-2017-15905

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform versions 4.0, 5.0, 5.1, 5.3, 6.0, 6.1, 15.0, and 16.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Retail Open Commerce Platform. Successful...

CVE-2017-3527: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Core. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3603: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-15949

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...