CVE-2017-3433

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3371

CVE-2017-3371 affects Oracle E-Business Suite’s iSupport (User Interface) with affected versions 12.1.1, 12.1.2, and 12.1.3. The vulnerability is described as unauthenticated but requires network access via HTTP and some user interaction, enabling potential unauthorized access to sensitive data a...

CVE-2016-5509

CVE-2016-5509 affects Oracle FLEXCUBE Investor Servicing (Core) in Oracle Financial Services Applications. Affected versions are 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP, potentially resulting in unauthori...

CVE-2016-5548

CVE-2016-5548 is a vulnerability in the Libraries subcomponent of Oracle Java SE/Java SE Embedded (OpenJDK context in many advisories) with a covert timing-channel flaw in the DSA implementation. Affected Java versions include Java SE 6u131, 7u121, 8u112 and Java SE Embedded 8u111. The issue can ...

CVE-2017-3388

CVE-2017-3388 affects Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (UI) across 12.1.1–12.2.6. It allows an unauthenticated attacker with HTTP access to compromise the Telephony component; human interaction is required, and impacts may extend to related products. CVSSv3 base score ...

CVE-2017-3428

CVE-2017-3428 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment User Interface. Affected versions: 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment; attacks may lead to unauthorized access to ...

CVE-2016-8308

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3443

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

CVE-2016-5549

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2016-8311

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2017-3244

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2017-3298

CVE-2017-3298 affects Oracle’s PeopleSoft Enterprise PeopleTools (subcomponent PIA Core Technology). Affected versions are 8.54 and 8.55. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise PeopleSoft Enterprise PeopleTools; successful exploits r...

CVE-2017-3313

CVE-2017-3313 affects the MySQL Server component (subcomponent: Server: MyISAM). Affected: MySQL/MariaDB versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. Impact described as unauthorized access to data or full data access on MySQL Server if exploited by a low-privileged us...

CVE-2016-5614

CVE-2016-5614 affects the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Affected versions: 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to read data from ...

CVE-2017-3256

CVE-2017-3256 affects Oracle MySQL Server (subcomponent: Server: Replication). Affected: MySQL 5.7.16 and earlier. Description specifies that a low-privileged attacker with network access via multiple protocols can cause a hang or a frequent crash (complete DOS) of MySQL Server. Connected documen...

CVE-2017-3291

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure...

CVE-2017-3243

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2017-3310

CVE-2017-3310 affects Oracle Database Server’s OJVM component in versions 11.2.0.4 and 12.1.0.2. The vulnerability allows a low-privileged attacker with Create Session and Create Procedure privileges, with network access via multiple protocols, to compromise OJVM. The exploitation requires user i...