VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2019-2527MedJan 16, 2019
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.26 and prior to 6.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2019-2509MedJan 16, 2019
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2019-2508MedJan 16, 2019
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2019-2487MedJan 16, 2019
    Oracle Corporation
    Transportation Management
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2019-2482MedJan 16, 2019
    Oracle Corporation
    MySQL
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2019-2469MedJan 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2019-2463MedJan 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2019-2456MedJan 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2019-2451MedJan 16, 2019
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2019-2450MedJan 16, 2019
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2019-2430MedJan 16, 2019
    Oracle Corporation
    Argus Safety
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2019-2425MedJan 16, 2019
    Oracle Corporation
    Hospitality Reporting And Analytics
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2019-2418MedJan 16, 2019
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2019-2417MedJan 16, 2019
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2019-2412MedJan 16, 2019
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.42cvss 6.4epss 0.00

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store). The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

  • CVE-2019-2403MedJan 16, 2019
    Oracle Corporation
    Hospitality Simphony
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality…

  • CVE-2019-2399MedJan 16, 2019
    Oracle Corporation
    Communications Diameter Signaling Router
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2018-3304MedJan 16, 2019
    Oracle Corporation
    Application Testing Suite
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows…

  • CVE-2018-3303MedJan 16, 2019
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console). Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-3125MedJan 16, 2019
    Oracle Corporation
    Retail Merchandising System
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Security (SQL Logger)). The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-1320HigJan 7, 2019
    Apache
    Thrift
    risk 0.42cvss 7.5epss 0.08

    Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production…

  • CVE-2018-20584MedDec 30, 2018
    Jasper Project
    Jasper
    risk 0.42cvss 6.5epss 0.03

    JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.

  • CVE-2018-15756HigOct 18, 2018
    VMware
    Spring Framework
    risk 0.42cvss 7.5epss 0.09

    Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an…

  • CVE-2018-3251MedOct 17, 2018
    MariaDB
    MariaDB
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2018-3249MedOct 17, 2018
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-3248MedOct 17, 2018
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2018-3236MedOct 17, 2018
    Oracle Corporation
    User Management
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network…

  • CVE-2018-3203MedOct 17, 2018
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2018-3182MedOct 17, 2018
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2018-3166MedOct 17, 2018
    Oracle Corporation
    Hospitality Cruise Fleet Management
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2018-3163MedOct 17, 2018
    Oracle Corporation
    Hospitality Cruise Fleet Management
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2018-3145MedOct 17, 2018
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2018-3137MedOct 17, 2018
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2018-2887MedOct 17, 2018
    Oracle Corporation
    Micros Retail J
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2018-11763MedSep 25, 2018
    Apache
    HTTP Server
    risk 0.42cvss 5.9epss 0.51

    In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2…

  • CVE-2018-16956MedSep 18, 2018
    Oracle Corporation
    Webcenter Interaction
    risk 0.42cvss 6.5epss 0.01

    The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software (such as IIS).…

  • CVE-2018-11775HigSep 10, 2018
    Apache
    Activemq
    risk 0.42cvss 7.4epss 0.07

    TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

  • CVE-2018-11056MedAug 31, 2018
    Rsa
    BSAFE Micro Edition Suite
    risk 0.42cvss 6.5epss 0.02

    RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use…

  • CVE-2018-1000632HigAug 20, 2018
    Dom4j Project
    Dom4j
    risk 0.42cvss 7.5epss 0.07

    dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker…

  • CVE-2018-3109MedAug 2, 2018
    Oracle Corporation
    Fusion Middleware
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2018-3108MedAug 2, 2018
    Oracle Corporation
    Fusion Middleware
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access…

  • CVE-2018-3073MedJul 18, 2018
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2018-3053MedJul 18, 2018
    Oracle Corporation
    Retail Customer Management And Segmentation Foundation
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2018-3052MedJul 18, 2018
    Oracle Corporation
    Micros Relate CRM Software
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2018-3041MedJul 18, 2018
    Oracle Corporation
    Flexcube Enterprise Limits And Collateral Management
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…

  • CVE-2018-3040MedJul 18, 2018
    Oracle Corporation
    Banking Corporate Lending
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…

  • CVE-2018-3030MedJul 18, 2018
    Oracle Corporation
    Flexcube Investor Servicing
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2018-3022MedJul 18, 2018
    Oracle Corporation
    Banking Payments
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2018-3014MedJul 18, 2018
    Oracle Corporation
    OPERA 5 Property Services
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2018-3013MedJul 18, 2018
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network…

Page 100 of 270