Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-2886	Oracle Corporation Forms	Med	0.40	6.1	0.01	Oct 16, 2019	Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful…
CVE-2019-2878	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.40	6.1	0.01	Jul 23, 2019	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2777	Oracle Corporation Siebel CRM	Med	0.40	6.1	0.01	Jul 23, 2019	Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel…
CVE-2019-2772	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jul 23, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2744	Oracle Corporation Flexcube Universal Banking	Med	0.40	6.1	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows…
CVE-2019-2736	Oracle Corporation Flexcube Investor Servicing	Med	0.40	6.1	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-13038	Fedoraproject Fedora	Med	0.40	6.1	0.01	Jun 29, 2019	mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
CVE-2019-2719	Oracle Corporation Siebel CRM	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications (InfoCenter)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2712	Oracle Corporation Commerce Platform	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2709	Oracle Corporation Transportation Management	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2707	Oracle Corporation Peoplesoft Enterprise Learning Management	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products (subcomponent: Application Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2659	Oracle Corporation Commerce Platform	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2637	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2591	Oracle Corporation Peoplesoft Enterprise Hrms	Med	0.40	6.1	0.01	Apr 23, 2019	Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-10241	Eclipse Jetty	Med	0.40	6.1	0.09	Apr 22, 2019	In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory…
CVE-2019-2549	Oracle Corporation Flexcube Direct Banking	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2540	Oracle Corporation Java Advanced Management Console	Med	0.40	6.1	0.02	Jan 16, 2019	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2519	Oracle Corporation Peoplesoft Enterprise	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2499	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2471	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2442	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2439	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2431	Oracle Corporation Argus Safety	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2423	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2421	Oracle Corporation Peoplesoft Products	Med	0.40	6.1	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products (subcomponent: Guided Self Service). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2407	Oracle Corporation Hospitality Reporting And Analytics	Med	0.40	6.1	0.00	Jan 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the…
CVE-2018-3301	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3281	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.01	Oct 17, 2018	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable…
CVE-2018-3272	Oracle Corporation Solaris	Med	0.40	6.2	0.01	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones Virtualized NIC Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure…
CVE-2018-3257	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3255	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3250	Oracle Corporation Weblogic Server	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3241	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.01	Oct 17, 2018	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable…
CVE-2018-3207	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3206	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3205	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3194	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3193	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3178	Oracle Corporation Hyperion Common Events	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3177	Oracle Corporation Hyperion Common Events	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3176	Oracle Corporation Hyperion Common Events	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3175	Oracle Corporation Hyperion Common Events	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3164	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3159	Oracle Corporation Hospitality Cruise Fleet Management	Med	0.40	6.1	0.00	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2018-3154	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3153	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3148	Oracle Corporation Primavera Unifier	Med	0.40	6.1	0.01	Oct 17, 2018	Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-3140	Oracle Corporation Hyperion	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3132	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3131	Oracle Corporation Hospitality Gift And Loyalty	Med	0.40	6.1	0.00	Oct 17, 2018	Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure…

CVE-2019-2886MedOct 16, 2019
Oracle Corporation
Forms
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful…
CVE-2019-2878MedJul 23, 2019
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2777MedJul 23, 2019
Oracle Corporation
Siebel CRM
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel…
CVE-2019-2772MedJul 23, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2744MedJul 23, 2019
Oracle Corporation
Flexcube Universal Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows…
CVE-2019-2736MedJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-13038MedJun 29, 2019
Fedoraproject
Fedora
risk 0.40cvss 6.1epss 0.01
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
CVE-2019-2719MedApr 23, 2019
Oracle Corporation
Siebel CRM
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications (InfoCenter)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2712MedApr 23, 2019
Oracle Corporation
Commerce Platform
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2709MedApr 23, 2019
Oracle Corporation
Transportation Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2707MedApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise Learning Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products (subcomponent: Application Search). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2659MedApr 23, 2019
Oracle Corporation
Commerce Platform
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2637MedApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2591MedApr 23, 2019
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-10241MedApr 22, 2019
Eclipse
Jetty
risk 0.40cvss 6.1epss 0.09
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory…
CVE-2019-2549MedJan 16, 2019
Oracle Corporation
Flexcube Direct Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2540MedJan 16, 2019
Oracle Corporation
Java Advanced Management Console
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2519MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2499MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2471MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2442MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2439MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2431MedJan 16, 2019
Oracle Corporation
Argus Safety
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2423MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2421MedJan 16, 2019
Oracle Corporation
Peoplesoft Products
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products (subcomponent: Guided Self Service). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2407MedJan 16, 2019
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the…
CVE-2018-3301MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3281MedOct 17, 2018
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable…
CVE-2018-3272MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.40cvss 6.2epss 0.01
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones Virtualized NIC Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure…
CVE-2018-3257MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3255MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3250MedOct 17, 2018
Oracle Corporation
Weblogic Server
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3241MedOct 17, 2018
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable…
CVE-2018-3207MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3206MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3205MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3194MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3193MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3178MedOct 17, 2018
Oracle Corporation
Hyperion Common Events
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3177MedOct 17, 2018
Oracle Corporation
Hyperion Common Events
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3176MedOct 17, 2018
Oracle Corporation
Hyperion Common Events
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3175MedOct 17, 2018
Oracle Corporation
Hyperion Common Events
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-3164MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3159MedOct 17, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2018-3154MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3153MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3148MedOct 17, 2018
Oracle Corporation
Primavera Unifier
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-3140MedOct 17, 2018
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3132MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3131MedOct 17, 2018
Oracle Corporation
Hospitality Gift And Loyalty
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure…

Page 111 of 270