Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-2535	Oracle Corporation Business Intelligence	Med	0.31	4.7	0.01	Jan 15, 2020	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-3024	Oracle Corporation Installed Base	Med	0.31	4.7	0.01	Oct 16, 2019	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-3023	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.01	Oct 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2999	NetApp E Series Santricity Storage Manager	Med	0.31	4.7	0.03	Oct 16, 2019	Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2019-2977	NetApp E Series Santricity Storage Manager	Med	0.31	4.8	0.03	Oct 16, 2019	Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2975	McAfee Epolicy Orchestrator	Med	0.31	4.8	0.03	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2019-2930	Oracle Corporation Field Service	Med	0.31	4.7	0.01	Oct 16, 2019	Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2861	Oracle Corporation Hyperion Planning	Med	0.31	4.2	0.04	Jul 23, 2019	Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion…
CVE-2019-2816	McAfee Epolicy Orchestrator	Med	0.31	4.8	0.02	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2019-2676	Oracle Corporation CRM Technical Foundation	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2674	Oracle Corporation One To One Fulfillment	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2673	Oracle Corporation Marketing	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2670	Oracle Corporation Marketing	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2669	Oracle Corporation CRM Technical Foundation	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2622	Oracle Corporation Service Contracts	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite (subcomponent: Renewals). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2621	Oracle Corporation Application Object Library	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2570	Oracle Corporation Siebel CRM	Med	0.31	4.7	0.01	Apr 23, 2019	Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2019-2512	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12 and 18.8. Difficult to exploit…
CVE-2019-2496	Oracle Corporation CRM Technical Foundation	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2492	Oracle Corporation Email Center	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2491	Oracle Corporation Email Center	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2490	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2485	Oracle Corporation Oracle Mobile Field Service	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2396	Oracle Corporation CRM Technical Foundation	Med	0.31	4.7	0.01	Jan 16, 2019	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3262	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3256	Oracle Corporation Email Center	Med	0.31	4.7	0.02	Oct 17, 2018	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3135	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2785	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.02	Apr 19, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-2635	Oracle Corporation Application Object Library	Med	0.31	4.8	0.01	Jan 18, 2018	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2018-2581	Sun Corporation Java SE	Med	0.31	4.7	0.03	Jan 18, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2017-10386	Oracle Corporation Java Advanced Management Console	Med	0.31	4.8	0.01	Oct 19, 2017	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2017-10382	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.01	Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-10380	Oracle Corporation Java Advanced Management Console	Med	0.31	4.7	0.01	Oct 19, 2017	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10318	Oracle Corporation Hospitality Suite8	Med	0.31	4.7	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10161	Oracle Corporation Supply Chain Products Suite	Med	0.31	4.8	0.01	Oct 19, 2017	Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security). Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2017-14159	OpenLDAP Openldap	Med	0.31	4.7	0.00	Sep 5, 2017	slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat…
CVE-2017-10252	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.00	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10251	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.00	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10250	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.00	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Tuxedo). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10149	Oracle Corporation Primavera Unifier	Med	0.31	4.8	0.01	Aug 8, 2017	Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2017-10063	Oracle Corporation Weblogic Server	Med	0.31	4.8	0.02	Aug 8, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-10020	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.00	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10015	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.00	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Designer). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-3535	Oracle Corporation Flexcube Universal Banking	Med	0.31	4.7	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows…
CVE-2017-3495	Oracle Corporation Flexcube Direct Banking	Med	0.31	4.7	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3494	Oracle Corporation Flexcube Universal Banking	Med	0.31	4.7	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated…
CVE-2017-3480	Oracle Corporation Flexcube Universal Banking	Med	0.31	4.7	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3471	Oracle Corporation Flexcube Private Banking	Med	0.31	4.7	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3313	MariaDB MariaDB	Med	0.31	4.7	0.00	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-3283	Oracle Corporation Partner Management	Med	0.31	4.7	0.01	Jan 27, 2017	Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…

CVE-2020-2535MedJan 15, 2020
Oracle Corporation
Business Intelligence
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2019-3024MedOct 16, 2019
Oracle Corporation
Installed Base
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-3023MedOct 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2999MedOct 16, 2019
NetApp
E Series Santricity Storage Manager
risk 0.31cvss 4.7epss 0.03
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2019-2977MedOct 16, 2019
NetApp
E Series Santricity Storage Manager
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2019-2975MedOct 16, 2019
McAfee
Epolicy Orchestrator
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2019-2930MedOct 16, 2019
Oracle Corporation
Field Service
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2861MedJul 23, 2019
Oracle Corporation
Hyperion Planning
risk 0.31cvss 4.2epss 0.04
Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion…
CVE-2019-2816MedJul 23, 2019
McAfee
Epolicy Orchestrator
risk 0.31cvss 4.8epss 0.02
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2019-2676MedApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2674MedApr 23, 2019
Oracle Corporation
One To One Fulfillment
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2673MedApr 23, 2019
Oracle Corporation
Marketing
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2670MedApr 23, 2019
Oracle Corporation
Marketing
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2669MedApr 23, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2622MedApr 23, 2019
Oracle Corporation
Service Contracts
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite (subcomponent: Renewals). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2621MedApr 23, 2019
Oracle Corporation
Application Object Library
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2570MedApr 23, 2019
Oracle Corporation
Siebel CRM
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). The supported version that is affected is 19.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2019-2512MedJan 16, 2019
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12 and 18.8. Difficult to exploit…
CVE-2019-2496MedJan 16, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2019-2492MedJan 16, 2019
Oracle Corporation
Email Center
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2491MedJan 16, 2019
Oracle Corporation
Email Center
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2490MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2019-2485MedJan 16, 2019
Oracle Corporation
Oracle Mobile Field Service
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…
CVE-2019-2396MedJan 16, 2019
Oracle Corporation
CRM Technical Foundation
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3262MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3256MedOct 17, 2018
Oracle Corporation
Email Center
risk 0.31cvss 4.7epss 0.02
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3135MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2785MedApr 19, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-2635MedJan 18, 2018
Oracle Corporation
Application Object Library
risk 0.31cvss 4.8epss 0.01
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2018-2581MedJan 18, 2018
Sun Corporation
Java SE
risk 0.31cvss 4.7epss 0.03
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2017-10386MedOct 19, 2017
Oracle Corporation
Java Advanced Management Console
risk 0.31cvss 4.8epss 0.01
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2017-10382MedOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-10380MedOct 19, 2017
Oracle Corporation
Java Advanced Management Console
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10318MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10161MedOct 19, 2017
Oracle Corporation
Supply Chain Products Suite
risk 0.31cvss 4.8epss 0.01
Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security). Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2017-14159MedSep 5, 2017
OpenLDAP
Openldap
risk 0.31cvss 4.7epss 0.00
slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat…
CVE-2017-10252MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10251MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10250MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Tuxedo). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10149MedAug 8, 2017
Oracle Corporation
Primavera Unifier
risk 0.31cvss 4.8epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2017-10063MedAug 8, 2017
Oracle Corporation
Weblogic Server
risk 0.31cvss 4.8epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-10020MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-10015MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Designer). Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-3535MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.31cvss 4.7epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows…
CVE-2017-3495MedApr 24, 2017
Oracle Corporation
Flexcube Direct Banking
risk 0.31cvss 4.7epss 0.02
Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3494MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated…
CVE-2017-3480MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.31cvss 4.7epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3471MedApr 24, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.31cvss 4.7epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3313MedJan 27, 2017
MariaDB
MariaDB
risk 0.31cvss 4.7epss 0.00
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the…
CVE-2017-3283MedJan 27, 2017
Oracle Corporation
Partner Management
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…

Page 157 of 270