VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk
  • CVE-2018-2731MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Scm Eprocurement
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2018-2709MedJan 18, 2018
    Oracle Corporation
    Banking Corporate Lending
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network…

  • CVE-2018-2708MedJan 18, 2018
    Oracle Corporation
    Banking Payments
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2691MedJan 18, 2018
    Oracle Corporation
    User Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Proxy User Delegation). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2018-2681MedJan 18, 2018
    Oracle Corporation
    PeopleSoft Enterprise HCM Human Resources
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2662MedJan 18, 2018
    Oracle Corporation
    Transportation Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7 and 6.4.1. Easily exploitable vulnerability allows low…

  • CVE-2018-2657MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.35cvss 5.3epss 0.08

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2653MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Connected Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2630MedJan 18, 2018
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged…

  • CVE-2018-2629MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.35cvss 5.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…

  • CVE-2018-2625MedJan 18, 2018
    Oracle Corporation
    Weblogic Server
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-2614MedJan 18, 2018
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Difficult to exploit…

  • CVE-2018-2610MedJan 18, 2018
    Oracle Corporation
    Hyperion Data Relationship Management
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-2603MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.35cvss 5.3epss 0.07

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows…

  • CVE-2018-2571MedJan 18, 2018
    Oracle Corporation
    Communications Unified Inventory Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications (subcomponent: Portal). Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2561MedJan 18, 2018
    Oracle Corporation
    HTTP Server
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web Listener). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker…

  • CVE-2013-4578MedDec 29, 2017
    Openjdk
    jarsigner
    risk 0.35cvss 5.3epss 0.03

    jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

  • CVE-2017-10266MedNov 14, 2017
    Oracle Corporation
    Tuxedo
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise…

  • CVE-2017-15906MedOct 26, 2017
    OpenSSH
    OpenSSH
    risk 0.35cvss 5.3epss 0.03

    The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

  • CVE-2017-10425MedOct 19, 2017
    Oracle Corporation
    Hospitality Simphony
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host). Supported versions that are affected are 2.6, 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2017-10423MedOct 19, 2017
    Oracle Corporation
    Retail Back Office
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2017-10400MedOct 19, 2017
    Oracle Corporation
    Glassfish Server
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-10395MedOct 19, 2017
    Oracle Corporation
    Hospitality Cruise Fleet Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2017-10394MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10383MedOct 19, 2017
    Oracle Corporation
    Hospitality Guest Access
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interface). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10367MedOct 19, 2017
    Oracle Corporation
    Hospitality Simphony
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10359MedOct 19, 2017
    Oracle Corporation
    Hyperion
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2017-10357MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10350MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2017-10349MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2017-10348MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10347MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2017-10342MedOct 19, 2017
    Oracle Corporation
    Java Advanced Management Console
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-10340MedOct 19, 2017
    Oracle Corporation
    Hospitality Simphony
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10337MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10336MedOct 19, 2017
    Oracle Corporation
    Weblogic Server
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10331MedOct 19, 2017
    Oracle Corporation
    Application Object Library
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…

  • CVE-2017-10324MedOct 19, 2017
    Oracle Corporation
    Applications Technology Stack
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2017-10322MedOct 19, 2017
    Oracle Corporation
    Common Applications Calendar
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability…

  • CVE-2017-10319MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10304MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Products
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft…

  • CVE-2017-10300MedOct 19, 2017
    Oracle Corporation
    Siebel CRM
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10283MedOct 19, 2017
    Oracle Corporation
    MySQL
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via…

  • CVE-2017-10281MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows…

  • CVE-2017-10277MedOct 19, 2017
    MySQL
    MySQL Connectors
    risk 0.35cvss 5.4epss 0.02

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2017-10264MedOct 19, 2017
    Oracle Corporation
    Siebel UI Framework
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI…

  • CVE-2017-10203MedOct 19, 2017
    Oracle Corporation
    Mysql Connectors
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2017-10162MedOct 19, 2017
    Oracle Corporation
    Siebel CRM
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel…

  • CVE-2017-10154MedOct 19, 2017
    Oracle Corporation
    Access Manager
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2017-10066MedOct 19, 2017
    Oracle Corporation
    Forms
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…

Page 135 of 270