Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-6794	Apache Tomcat	Med	0.28	5.3	0.07	Aug 10, 2017	When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement…
CVE-2017-3651	MariaDB MariaDB	Med	0.28	4.3	0.02	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10218	Oracle Corporation Hospitality Guest Access	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10217	Oracle Corporation Hospitality Guest Access	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10208	Oracle Corporation Hospitality E7	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle…
CVE-2017-10205	Oracle Corporation Hospitality Simphony	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10195	Oracle Corporation Hospitality Simphony	Med	0.28	4.3	0.02	Aug 8, 2017	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10175	Oracle Corporation Isupport	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10160	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged…
CVE-2017-10150	Oracle Corporation Primavera Unifier	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10133	Oracle Corporation Hospitality Hotel Mobile	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RestAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10132	Oracle Corporation Hospitality Hotel Mobile	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/iOS). The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10123	Oracle Corporation Weblogic Server	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2017-10105	NetApp Steelstore Cloud Integrated Storage	Med	0.28	4.3	0.02	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2017-10081	NetApp Steelstore Cloud Integrated Storage	Med	0.28	4.3	0.02	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10071	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.02	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability…
CVE-2017-10022	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10018	Oracle Corporation Peoplesoft Enterprise Fscm	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10009	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10008	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10007	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3560	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.28	4.3	0.01	Apr 24, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability…
CVE-2017-3552	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.28	4.3	0.01	Apr 24, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room Image/Picture Setup). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable"…
CVE-2017-3481	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3473	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3465	Oracle Corporation MySQL	Med	0.28	4.3	0.02	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2017-3464	MariaDB MariaDB	Med	0.28	4.3	0.02	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access…
CVE-2017-3315	Oracle Corporation Peoplesoft Enterprise Human Capital Management Eperformance	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-3296	Oracle Corporation Commerce Platform	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3261	Sun Corporation Java SE	Med	0.28	4.3	0.03	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3247	Oracle Corporation Glassfish Server	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise…
CVE-2017-3231	Sun Corporation Java SE	Med	0.28	4.3	0.02	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-8322	Oracle Corporation Flexcube Core Banking	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-8309	Oracle Corporation Flexcube Investor Servicing	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8308	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8302	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-8301	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-5614	Oracle Corporation Flexcube Private Banking	Med	0.28	4.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8295	Oracle Corporation Peoplesoft Products	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-8294	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5621	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different…
CVE-2016-5613	Oracle Corporation VM Virtualbox	Med	0.28	4.3	0.00	Oct 25, 2016	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.
CVE-2016-5611	Oracle Corporation VM Virtualbox	Med	0.28	4.3	0.00	Oct 25, 2016	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
CVE-2016-5603	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different…
CVE-2016-5596	Oracle Corporation CRM Technical Foundation	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5554	Oracle Corporation Java SE Embedded	Med	0.28	4.3	0.03	Oct 25, 2016	Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
CVE-2016-5522	Oracle Corporation Supply Chain Products Suite	Med	0.28	4.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5513	Oracle Corporation Supply Chain Products Suite	Med	0.28	4.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
CVE-2016-5511	Oracle Corporation Webcenter Sites	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5479	Oracle Corporation Flexcube Universal Banking	Med	0.28	4.3	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA.

CVE-2016-6794MedAug 10, 2017
Apache
Tomcat
risk 0.28cvss 5.3epss 0.07
When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement…
CVE-2017-3651MedAug 8, 2017
MariaDB
MariaDB
risk 0.28cvss 4.3epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10218MedAug 8, 2017
Oracle Corporation
Hospitality Guest Access
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10217MedAug 8, 2017
Oracle Corporation
Hospitality Guest Access
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10208MedAug 8, 2017
Oracle Corporation
Hospitality E7
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle…
CVE-2017-10205MedAug 8, 2017
Oracle Corporation
Hospitality Simphony
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10195MedAug 8, 2017
Oracle Corporation
Hospitality Simphony
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10175MedAug 8, 2017
Oracle Corporation
Isupport
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10160MedAug 8, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged…
CVE-2017-10150MedAug 8, 2017
Oracle Corporation
Primavera Unifier
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10133MedAug 8, 2017
Oracle Corporation
Hospitality Hotel Mobile
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RestAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10132MedAug 8, 2017
Oracle Corporation
Hospitality Hotel Mobile
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/iOS). The supported version that is affected is 1.05. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10123MedAug 8, 2017
Oracle Corporation
Weblogic Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2017-10105MedAug 8, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2017-10081MedAug 8, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10071MedAug 8, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability…
CVE-2017-10022MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10018MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Fscm
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10009MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10008MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10007MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3560MedApr 24, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability…
CVE-2017-3552MedApr 24, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room Image/Picture Setup). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable"…
CVE-2017-3481MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3473MedApr 24, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3465MedApr 24, 2017
Oracle Corporation
MySQL
risk 0.28cvss 4.3epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2017-3464MedApr 24, 2017
MariaDB
MariaDB
risk 0.28cvss 4.3epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access…
CVE-2017-3315MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Human Capital Management Eperformance
risk 0.28cvss 4.3epss 0.01
Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-3296MedJan 27, 2017
Oracle Corporation
Commerce Platform
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3261MedJan 27, 2017
Sun Corporation
Java SE
risk 0.28cvss 4.3epss 0.03
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3247MedJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise…
CVE-2017-3231MedJan 27, 2017
Sun Corporation
Java SE
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-8322MedJan 27, 2017
Oracle Corporation
Flexcube Core Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-8309MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8308MedJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8302MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-8301MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-5614MedJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8295MedOct 25, 2016
Oracle Corporation
Peoplesoft Products
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-8294MedOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5621MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different…
CVE-2016-5613MedOct 25, 2016
Oracle Corporation
VM Virtualbox
risk 0.28cvss 4.3epss 0.00
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.
CVE-2016-5611MedOct 25, 2016
Oracle Corporation
VM Virtualbox
risk 0.28cvss 4.3epss 0.00
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
CVE-2016-5603MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different…
CVE-2016-5596MedOct 25, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5554MedOct 25, 2016
Oracle Corporation
Java SE Embedded
risk 0.28cvss 4.3epss 0.03
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
CVE-2016-5522MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.28cvss 4.3epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5513MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.28cvss 4.3epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
CVE-2016-5511MedOct 25, 2016
Oracle Corporation
Webcenter Sites
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5479MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA.

Page 166 of 270