Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-3455	Oracle Corporation MySQL	Med	0.35	5.4	0.02	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2017-3451	Oracle Corporation Retail Open Commerce Platform Cloud Service	Med	0.35	5.4	0.01	Apr 24, 2017	Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3305	Oracle Corporation MySQL	Med	0.35	5.3	0.01	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple…
CVE-2017-3304	Oracle Corporation Mysql Cluster	Med	0.35	5.4	0.01	Apr 24, 2017	Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3288	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2015-8896	ImageMagick Imagemagick	Med	0.35	6.5	0.03	Mar 15, 2017	Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
CVE-2017-3311	Oracle Corporation Application Testing Suite	Med	0.35	5.3	0.02	Jan 27, 2017	Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps). Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3297	Oracle Corporation Flexcube Direct Banking	Med	0.35	5.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2017-3262	Sun Corporation Java SE	Med	0.35	5.3	0.02	Jan 27, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java…
CVE-2016-8324	Oracle Corporation Flexcube Core Banking	Med	0.35	5.3	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2016-8323	Oracle Corporation Flexcube Core Banking	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-8317	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged…
CVE-2016-8316	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8307	Oracle Corporation Flexcube Universal Banking	Med	0.35	5.3	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8306	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8304	Oracle Corporation Flexcube Universal Banking	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-8300	Oracle Corporation Flexcube Private Banking	Med	0.35	5.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged…
CVE-2016-5623	Oracle Corporation Flexcube Private Banking	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-5552	Oracle Corporation Jrockit	Med	0.35	5.3	0.03	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows…
CVE-2016-5547	Oracle Corporation Jrockit	Med	0.35	5.3	0.04	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5620	Oracle Corporation Flexcube Universal Banking	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5600	Oracle Corporation Peoplesoft Products	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5583	Oracle Corporation One To One Fulfillment	Med	0.35	5.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5575	Oracle Corporation Common Applications	Med	0.35	5.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.
CVE-2016-5569	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5566	Oracle Corporation Solaris	Med	0.35	5.3	0.02	Oct 25, 2016	Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5560	Oracle Corporation Siebel CRM	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.
CVE-2016-5533	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5532	Oracle Corporation Shipping Execution	Med	0.35	5.3	0.03	Oct 25, 2016	Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.
CVE-2016-5524	Oracle Corporation Supply Chain Products Suite	Med	0.35	5.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.
CVE-2016-5510	Oracle Corporation Supply Chain Products Suite	Med	0.35	5.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5502	Oracle Corporation Flexcube Universal Banking	Med	0.35	5.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5488	Oracle Corporation Weblogic Server	Med	0.35	5.3	0.04	Oct 25, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.
CVE-2016-5468	Oracle Corporation Siebel UI Framework	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.
CVE-2016-5467	Oracle Corporation Peoplesoft Enterprise Fscm	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement.
CVE-2016-5456	Oracle Corporation Siebel CRM	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services.
CVE-2016-5455	Oracle Corporation Communications Messaging Server	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.
CVE-2016-3614	Oracle Corporation MySQL	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.
CVE-2016-3611	Oracle Corporation Retail Order Broker	Med	0.35	5.4	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration.
CVE-2016-3567	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.
CVE-2016-3560	Oracle Corporation Agile Plm	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3529.
CVE-2016-3553	Oracle Corporation Agile Plm	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to PC Core.
CVE-2016-3549	Oracle Corporation Secure Enterprise Search	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine.
CVE-2016-3548	Oracle Corporation Marketing	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral.
CVE-2016-3547	Oracle Corporation One To One Fulfillment	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Content Manager.
CVE-2016-3545	Oracle Corporation Application Object Library	Med	0.35	5.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.
CVE-2016-3524	Oracle Corporation E Business Suite	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.
CVE-2016-3509	Oracle Corporation Agile Plm	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Folders / URL Attachment.
CVE-2016-3508	Sun Corporation Java SE	Med	0.35	5.3	0.05	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
CVE-2016-3500	Sun Corporation Java SE	Med	0.35	5.3	0.05	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

CVE-2017-3455MedApr 24, 2017
Oracle Corporation
MySQL
risk 0.35cvss 5.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2017-3451MedApr 24, 2017
Oracle Corporation
Retail Open Commerce Platform Cloud Service
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3305MedApr 24, 2017
Oracle Corporation
MySQL
risk 0.35cvss 5.3epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple…
CVE-2017-3304MedApr 24, 2017
Oracle Corporation
Mysql Cluster
risk 0.35cvss 5.4epss 0.01
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3288MedApr 24, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2015-8896MedMar 15, 2017
ImageMagick
Imagemagick
risk 0.35cvss 6.5epss 0.03
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
CVE-2017-3311MedJan 27, 2017
Oracle Corporation
Application Testing Suite
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps). Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3297MedJan 27, 2017
Oracle Corporation
Flexcube Direct Banking
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2017-3262MedJan 27, 2017
Sun Corporation
Java SE
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java…
CVE-2016-8324MedJan 27, 2017
Oracle Corporation
Flexcube Core Banking
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2016-8323MedJan 27, 2017
Oracle Corporation
Flexcube Core Banking
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-8317MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged…
CVE-2016-8316MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8307MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8306MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8304MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-8300MedJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged…
CVE-2016-5623MedJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-5552MedJan 27, 2017
Oracle Corporation
Jrockit
risk 0.35cvss 5.3epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows…
CVE-2016-5547MedJan 27, 2017
Oracle Corporation
Jrockit
risk 0.35cvss 5.3epss 0.04
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5620MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5600MedOct 25, 2016
Oracle Corporation
Peoplesoft Products
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5583MedOct 25, 2016
Oracle Corporation
One To One Fulfillment
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5575MedOct 25, 2016
Oracle Corporation
Common Applications
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.
CVE-2016-5569MedOct 25, 2016
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5566MedOct 25, 2016
Oracle Corporation
Solaris
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5560MedOct 25, 2016
Oracle Corporation
Siebel CRM
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.
CVE-2016-5533MedOct 25, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5532MedOct 25, 2016
Oracle Corporation
Shipping Execution
risk 0.35cvss 5.3epss 0.03
Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.
CVE-2016-5524MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.
CVE-2016-5510MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5502MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5488MedOct 25, 2016
Oracle Corporation
Weblogic Server
risk 0.35cvss 5.3epss 0.04
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.
CVE-2016-5468MedJul 21, 2016
Oracle Corporation
Siebel UI Framework
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.
CVE-2016-5467MedJul 21, 2016
Oracle Corporation
Peoplesoft Enterprise Fscm
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement.
CVE-2016-5456MedJul 21, 2016
Oracle Corporation
Siebel CRM
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services.
CVE-2016-5455MedJul 21, 2016
Oracle Corporation
Communications Messaging Server
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.
CVE-2016-3614MedJul 21, 2016
Oracle Corporation
MySQL
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.
CVE-2016-3611MedJul 21, 2016
Oracle Corporation
Retail Order Broker
risk 0.35cvss 5.4epss 0.02
Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration.
CVE-2016-3567MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.
CVE-2016-3560MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3529.
CVE-2016-3553MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to PC Core.
CVE-2016-3549MedJul 21, 2016
Oracle Corporation
Secure Enterprise Search
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine.
CVE-2016-3548MedJul 21, 2016
Oracle Corporation
Marketing
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral.
CVE-2016-3547MedJul 21, 2016
Oracle Corporation
One To One Fulfillment
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Content Manager.
CVE-2016-3545MedJul 21, 2016
Oracle Corporation
Application Object Library
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.
CVE-2016-3524MedJul 21, 2016
Oracle Corporation
E Business Suite
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.
CVE-2016-3509MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Folders / URL Attachment.
CVE-2016-3508MedJul 21, 2016
Sun Corporation
Java SE
risk 0.35cvss 5.3epss 0.05
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
CVE-2016-3500MedJul 21, 2016
Sun Corporation
Java SE
risk 0.35cvss 5.3epss 0.05
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

Page 137 of 270