CVE-2017-10317: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

PT-2017-11344

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 2.8 and 2.9 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other...

CVE-2017-10426: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-11335

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.1.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. Successful attacks can result in unauthorized update,...

PT-2017-11283

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM, requiring human interaction from a person other than the attacker. Successful...

PT-2017-11151

Name of the Vulnerable Software and Affected Versions Oracle Communications Policy Management versions 11.5 and 12.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human...

PT-2017-11156

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM, resulting in unauthorized read access to a subset of accessible data...

CVE-2017-10334: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-11034

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0 and 12.2.1.2.0 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks...

PT-2017-11395

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FSCM version 9.2 Description The issue affects the Staffing Front Office subcomponent, allowing a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. This can result in...

CVE-2017-10164: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2017-11311

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebLogic Server, resulting in unauthorized read access to a...

PT-2017-11294

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.10.1 through 8.10.2 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8, resulting in...

CVE-2017-10154: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

PT-2017-11308

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Oracle Application Object Library component, specifically the Diagnostics subcomponent. It allows an unauthenticated attacker wit...

CVE-2017-10383: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Interface. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10318: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2017-11339

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2017-10362: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Sawbridge. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-8643

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions prior to 2.6.4 Apache Hadoop versions 2.7.x prior to 2.7.2 Description This issue allows a local user on an HDFS DataNode to potentially gain unauthorized read access to random files. The vulnerability exists in the...