VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk
  • CVE-2019-2586MedApr 23, 2019
    Oracle Corporation
    Peoplesoft Products
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2019-2579MedApr 23, 2019
    Oracle Corporation
    Webcenter Sites
    risk 0.28cvss 4.3epss 0.06

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2019-2573MedApr 23, 2019
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2564MedApr 23, 2019
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…

  • CVE-2019-1003050MedApr 10, 2019
    Jenkins Project
    Jenkins
    risk 0.28cvss 5.4epss 0.01

    The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job names.

  • CVE-2019-7317MedFeb 4, 2019
    Libpng
    Libpng
    risk 0.28cvss 5.3epss 0.09

    png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

  • CVE-2019-2550MedJan 16, 2019
    Oracle Corporation
    Flexcube Direct Banking
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2019-2546MedJan 16, 2019
    Oracle Corporation
    Applications Manager
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows…

  • CVE-2019-2415MedJan 16, 2019
    Oracle Corporation
    Hyperion
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+.…

  • CVE-2019-2408MedJan 16, 2019
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2019-2398MedJan 16, 2019
    Oracle Corporation
    Weblogic Server
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-3286MedOct 17, 2018
    NetApp
    Snapcenter
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2018-3269MedOct 17, 2018
    Oracle Corporation
    Solaris
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…

  • CVE-2018-3147MedOct 17, 2018
    Oracle Corporation
    Outside In Technology
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2018-3129MedOct 17, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-3127MedOct 17, 2018
    Oracle Corporation
    Demantra Demand Management
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions that are affected are 7.3.5 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-2971MedOct 17, 2018
    Oracle Corporation
    Applications Framework
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2902MedOct 17, 2018
    Oracle Corporation
    Weblogic Server
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-1999007MedJul 23, 2018
    Jenkins Project
    Jenkins
    risk 0.28cvss 5.4epss 0.01

    A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to control the existence of some URLs in Jenkins to define JavaScript that would…

  • CVE-2018-1999005MedJul 23, 2018
    Jenkins Project
    Jenkins
    risk 0.28cvss 5.4epss 0.01

    A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in BuildTimelineWidget.java, BuildTimelineWidget/control.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser…

  • CVE-2018-3105MedJul 18, 2018
    Oracle Corporation
    Soa Suite
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged…

  • CVE-2018-3056MedJul 18, 2018
    NetApp
    Snapcenter
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2970MedJul 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2018-2969MedJul 18, 2018
    Oracle Corporation
    Primavera Unifier
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). The supported version that is affected is 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-2963MedJul 18, 2018
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged…

  • CVE-2018-2959MedJul 18, 2018
    Oracle Corporation
    Siebel UI Framework
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework.…

  • CVE-2018-2940MedJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2018-2927MedJul 18, 2018
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2874MedApr 19, 2018
    Oracle Corporation
    Application Object Library
    risk 0.28cvss 4.3epss 0.00

    Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library.…

  • CVE-2018-2820MedApr 19, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2018-2813MedApr 19, 2018
    MariaDB
    MariaDB
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2809MedApr 19, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2800MedApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.2epss 0.05

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…

  • CVE-2018-1199MedMar 16, 2018
    VMware
    Spring Framework
    risk 0.28cvss 5.3epss 0.03

    Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider URL path parameters when processing security constraints. By adding a URL path parameter with…

  • CVE-2018-1000068MedFeb 16, 2018
    Jenkins Project
    Jenkins
    risk 0.28cvss 5.3epss 0.02

    An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on…

  • CVE-2018-1000067MedFeb 16, 2018
    Jenkins Project
    Jenkins
    risk 0.28cvss 5.3epss 0.02

    An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

  • CVE-2018-2678MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows…

  • CVE-2018-2677MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2663MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows…

  • CVE-2018-2632MedJan 18, 2018
    Oracle Corporation
    Siebel Engineering Installer And Deployment
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM (subcomponent: Siebel Approval Manager). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2018-2631MedJan 18, 2018
    Oracle Corporation
    Transportation Management
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2.11, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable…

  • CVE-2018-2595MedJan 18, 2018
    Oracle Corporation
    Hyperion Bi\+
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+.…

  • CVE-2018-2594MedJan 18, 2018
    Oracle Corporation
    Hyperion Bi\+
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+.…

  • CVE-2018-2588MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.28cvss 4.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low…

  • CVE-2018-2584MedJan 18, 2018
    Oracle Corporation
    Webcenter Sites
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2017-10387MedOct 19, 2017
    Oracle Corporation
    CRM Technical Foundation
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…

  • CVE-2017-10334MedOct 19, 2017
    Oracle Corporation
    Weblogic Server
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2017-10299MedOct 19, 2017
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2017-10287MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Enterprise Fscm
    risk 0.28cvss 4.3epss 0.02

    Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2017-10164MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Products
    risk 0.28cvss 4.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

Page 165 of 270