Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-3040	Oracle Corporation Banking Corporate Lending	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3030	Oracle Corporation Flexcube Investor Servicing	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3022	Oracle Corporation Banking Payments	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3014	Oracle Corporation OPERA 5 Property Services	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3013	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2979	Oracle Corporation Flexcube Universal Banking	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2977	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2968	Oracle Corporation Primavera Unifier	Med	0.42	6.5	0.01	Jul 18, 2018	Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2947	Oracle Corporation Jd Edwards Enterpriseone	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2018-2925	Oracle Corporation Bi Publisher	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2904	Oracle Corporation Communications Eagle Lnp Application Processor	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-11040	VMware Spring Framework	Hig	0.42	7.5	0.03	Jun 25, 2018	Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and…
CVE-2018-1000180	NetApp Oncommand Workflow Automation	Hig	0.42	7.5	0.03	Jun 5, 2018	Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in…
CVE-2018-8012	Apache Zookeeper	Hig	0.42	7.5	0.08	May 21, 2018	No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.
CVE-2018-2861	Oracle Corporation Retail Back Office	Med	0.42	6.5	0.02	Apr 19, 2018	Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2852	Oracle Corporation Hospitality Guest Access	Med	0.42	6.4	0.01	Apr 19, 2018	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2847	Oracle Corporation Hospitality Simphony	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2823	Oracle Corporation Transportation Management	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2805	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). Supported versions that are affected are 5.6.39 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2782	MariaDB MariaDB	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-2780	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2775	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2758	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2747	Oracle Corporation Banking Corporate Lending	Med	0.42	6.5	0.02	Apr 19, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2738	Oracle Corporation Retail Central Office	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-2737	Oracle Corporation Retail Returns Management	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2587	Oracle Corporation Access Manager	Med	0.42	6.5	0.02	Apr 19, 2018	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-1272	VMware Spring Framework	Hig	0.42	7.5	0.03	Apr 6, 2018	Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses…
CVE-2018-1000121	Curl Curl	Hig	0.42	7.5	0.09	Mar 14, 2018	A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
CVE-2018-2730	Oracle Corporation Retail Merchandising System	Med	0.42	6.4	0.01	Jan 18, 2018	Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2715	Oracle Corporation Business Intelligence	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-2702	Oracle Corporation Peoplesoft Enterprise Fscm	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2695	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2671	Oracle Corporation Peoplesoft Enterprise Scm Purchasing	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2643	Oracle Corporation Argus Safety	Med	0.42	6.4	0.01	Jan 18, 2018	Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Case Selection). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2642	Oracle Corporation Argus Safety	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: File Upload). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2619	Oracle Corporation Hospitality Simphony	Med	0.42	6.5	0.01	Jan 18, 2018	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2605	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.02	Jan 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-10427	Oracle Corporation Retail Xstore Point Of Service	Med	0.42	6.5	0.01	Oct 19, 2017	Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2017-10421	Oracle Corporation Hospitality Suite8	Med	0.42	6.5	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10420	Oracle Corporation Hospitality Suite8	Med	0.42	6.4	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10418	Oracle Corporation Peoplesoft Products	Med	0.42	6.4	0.01	Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10384	MariaDB MariaDB	Med	0.42	6.5	0.03	Oct 19, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10379	MariaDB MariaDB	Med	0.42	6.5	0.02	Oct 19, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10361	Oracle Corporation Hospitality Cruise Shipboard Property Management System	Med	0.42	6.4	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10358	Oracle Corporation Hyperion Financial Reporting	Med	0.42	6.4	0.01	Oct 19, 2017	Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2017-10344	Oracle Corporation Hospitality Simphony	Med	0.42	6.5	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10343	Oracle Corporation Hospitality Simphony	Med	0.42	6.5	0.02	Oct 19, 2017	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10316	Oracle Corporation Hospitality Suite8	Med	0.42	6.5	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10280	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.02	Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via…

CVE-2018-3040MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3030MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3022MedJul 18, 2018
Oracle Corporation
Banking Payments
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3014MedJul 18, 2018
Oracle Corporation
OPERA 5 Property Services
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3013MedJul 18, 2018
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2979MedJul 18, 2018
Oracle Corporation
Flexcube Universal Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2977MedJul 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2968MedJul 18, 2018
Oracle Corporation
Primavera Unifier
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2947MedJul 18, 2018
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.42cvss 6.5epss 0.02
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2018-2925MedJul 18, 2018
Oracle Corporation
Bi Publisher
risk 0.42cvss 6.5epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2904MedJul 18, 2018
Oracle Corporation
Communications Eagle Lnp Application Processor
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-11040HigJun 25, 2018
VMware
Spring Framework
risk 0.42cvss 7.5epss 0.03
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and…
CVE-2018-1000180HigJun 5, 2018
NetApp
Oncommand Workflow Automation
risk 0.42cvss 7.5epss 0.03
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in…
CVE-2018-8012HigMay 21, 2018
Apache
Zookeeper
risk 0.42cvss 7.5epss 0.08
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.
CVE-2018-2861MedApr 19, 2018
Oracle Corporation
Retail Back Office
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2852MedApr 19, 2018
Oracle Corporation
Hospitality Guest Access
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2847MedApr 19, 2018
Oracle Corporation
Hospitality Simphony
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2823MedApr 19, 2018
Oracle Corporation
Transportation Management
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2805MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). Supported versions that are affected are 5.6.39 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2782MedApr 19, 2018
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-2780MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2775MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2758MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2747MedApr 19, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2738MedApr 19, 2018
Oracle Corporation
Retail Central Office
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-2737MedApr 19, 2018
Oracle Corporation
Retail Returns Management
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2587MedApr 19, 2018
Oracle Corporation
Access Manager
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-1272HigApr 6, 2018
VMware
Spring Framework
risk 0.42cvss 7.5epss 0.03
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses…
CVE-2018-1000121HigMar 14, 2018
Curl
Curl
risk 0.42cvss 7.5epss 0.09
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
CVE-2018-2730MedJan 18, 2018
Oracle Corporation
Retail Merchandising System
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2715MedJan 18, 2018
Oracle Corporation
Business Intelligence
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-2702MedJan 18, 2018
Oracle Corporation
Peoplesoft Enterprise Fscm
risk 0.42cvss 6.5epss 0.01
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2695MedJan 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2671MedJan 18, 2018
Oracle Corporation
Peoplesoft Enterprise Scm Purchasing
risk 0.42cvss 6.5epss 0.01
Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2643MedJan 18, 2018
Oracle Corporation
Argus Safety
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Case Selection). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2642MedJan 18, 2018
Oracle Corporation
Argus Safety
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: File Upload). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2619MedJan 18, 2018
Oracle Corporation
Hospitality Simphony
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2605MedJan 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-10427MedOct 19, 2017
Oracle Corporation
Retail Xstore Point Of Service
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2017-10421MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10420MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10418MedOct 19, 2017
Oracle Corporation
Peoplesoft Products
risk 0.42cvss 6.4epss 0.01
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10384MedOct 19, 2017
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10379MedOct 19, 2017
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10361MedOct 19, 2017
Oracle Corporation
Hospitality Cruise Shipboard Property Management System
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10358MedOct 19, 2017
Oracle Corporation
Hyperion Financial Reporting
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2017-10344MedOct 19, 2017
Oracle Corporation
Hospitality Simphony
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10343MedOct 19, 2017
Oracle Corporation
Hospitality Simphony
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10316MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10280MedOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via…

Page 101 of 270