Vendor CVEs

Oracle Corporation

All CVEs

10,082 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-3609	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3608	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3607	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3606	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3605	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3604	Oracle Corporation Berkeley Db	Hig	0.46	7.0	0.00		Apr 24, 2017	Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3595	Oracle Corporation Webcenter Sites	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3593	Oracle Corporation Webcenter Sites	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3591	Oracle Corporation Webcenter Sites	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3574	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.46	7.1	0.01		Apr 24, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License code configuration). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable"…
CVE-2017-3557	Oracle Corporation One To One Fulfillment	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3550	Oracle Corporation Customer Interaction History	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Admin Console). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3546	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.46	6.5	0.10		Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3476	Oracle Corporation Flexcube Private Banking	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3432	Oracle Corporation One To One Fulfillment	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3393	Oracle Corporation Advanced Outbound Telephony	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3337	Oracle Corporation Marketing	Hig	0.46	7.1	0.02		Apr 24, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2016-5625	Oracle Corporation MySQL	Hig	0.46	7.0	0.00		Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
CVE-2016-5492	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.46	7.1	0.00		Oct 25, 2016	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.
CVE-2016-3584	Oracle Corporation Solaris	Hig	0.46	7.0	0.00		Jul 21, 2016	Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Libadimalloc.
CVE-2016-3542	Oracle Corporation Knowledge Management	Med	0.46	6.5	0.10		Jul 21, 2016	Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors.
CVE-2016-3539	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03		Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.
CVE-2016-3538	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03		Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.
CVE-2016-3530	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03		Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.
CVE-2016-3470	Oracle Corporation Transportation Management	Hig	0.46	7.1	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.
CVE-2014-0196	Linux Kernel	Med	0.46	5.5	0.22	KEV	May 7, 2014	The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering…
CVE-2013-2423	Openjdk OpenJDK	Low	0.46	3.7	0.85	KEV	Apr 17, 2013	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU.…
CVE-2018-2988	Oracle Corporation Marketing	Med	0.45	6.9	0.02		Jul 18, 2018	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Products). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2018-2634	Sun Corporation Java SE	Med	0.45	6.8	0.05		Jan 18, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-10370	Oracle Corporation Hospitality Guest Access	Med	0.45	6.9	0.01		Oct 19, 2017	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-10058	Oracle Corporation Business Intelligence	Med	0.45	6.9	0.01		Aug 8, 2017	Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high…
CVE-2016-3447	Oracle Corporation Applications Framework	Med	0.45	6.9	0.01		Apr 21, 2016	Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.
CVE-2012-1695	Sun Corporation Jdk	Med	0.45	6.8	0.04		May 3, 2012	Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2026-34325	Oracle Corporation Financial Services Analytical Applications Infrastructure	Med	0.44	6.8	0.00		Apr 21, 2026	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows…
CVE-2026-34314	Oracle Corporation Financial Services Analytical Applications Infrastructure	Med	0.44	6.8	0.00		Apr 21, 2026	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low…
CVE-2018-2888	Oracle Corporation MICROS Retail-J	Med	0.44	6.7	0.01		Jul 18, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to…
CVE-2018-3639	Microsoft Windows Server 2008	Med	0.44	5.5	0.61		May 22, 2018	Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,…
CVE-2018-2583	Oracle Corporation Mysql Server	Med	0.44	6.8	0.03		Jan 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Stored Procedure). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2017-10274	NetApp Steelstore Cloud Integrated Storage	Med	0.44	6.8	0.03		Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2017-10235	Oracle Corporation VM Virtualbox	Med	0.44	6.7	0.01		Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10198	NetApp Steelstore Cloud Integrated Storage	Med	0.44	6.8	0.03		Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…
CVE-2017-10181	Oracle Corporation Flexcube Direct Banking	Med	0.44	6.8	0.01		Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Forgot Password). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10039	Oracle Corporation Agile Plm	Med	0.44	6.8	0.02		Aug 8, 2017	Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10004	Oracle Corporation Solaris	Med	0.44	6.7	0.00		Aug 8, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3485	Oracle Corporation Flexcube Universal Banking	Med	0.44	6.8	0.02		Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit…
CVE-2017-3312	MariaDB MariaDB	Med	0.44	6.7	0.00		Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2016-8318	Oracle Corporation MySQL	Med	0.44	6.8	0.01		Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-5610	Oracle Corporation VM Virtualbox	Med	0.44	6.8	0.00		Oct 25, 2016	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
CVE-2016-5540	Oracle Corporation Retail Applications	Med	0.44	6.7	0.00		Oct 25, 2016	Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5538	Oracle Corporation VM Virtualbox	Med	0.44	6.7	0.00		Oct 25, 2016	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.

CVE-2017-3609HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3608HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3607HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3606HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3605HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3604HigApr 24, 2017
Oracle Corporation
Berkeley Db
risk 0.46cvss 7.0epss 0.00
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store.…
CVE-2017-3595HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3593HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3591HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3574HigApr 24, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License code configuration). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable"…
CVE-2017-3557HigApr 24, 2017
Oracle Corporation
One To One Fulfillment
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3550HigApr 24, 2017
Oracle Corporation
Customer Interaction History
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Admin Console). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3546MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.46cvss 6.5epss 0.10
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3476HigApr 24, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker…
CVE-2017-3432HigApr 24, 2017
Oracle Corporation
One To One Fulfillment
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3393HigApr 24, 2017
Oracle Corporation
Advanced Outbound Telephony
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3337HigApr 24, 2017
Oracle Corporation
Marketing
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2016-5625HigOct 25, 2016
Oracle Corporation
MySQL
risk 0.46cvss 7.0epss 0.00
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
CVE-2016-5492HigOct 25, 2016
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.46cvss 7.1epss 0.00
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.
CVE-2016-3584HigJul 21, 2016
Oracle Corporation
Solaris
risk 0.46cvss 7.0epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Libadimalloc.
CVE-2016-3542MedJul 21, 2016
Oracle Corporation
Knowledge Management
risk 0.46cvss 6.5epss 0.10
Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors.
CVE-2016-3539HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.
CVE-2016-3538HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.
CVE-2016-3530HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.
CVE-2016-3470HigJul 21, 2016
Oracle Corporation
Transportation Management
risk 0.46cvss 7.1epss 0.02
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.
CVE-2014-0196MedKEVMay 7, 2014
Linux
Kernel
risk 0.46cvss 5.5epss 0.22
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering…
CVE-2013-2423LowKEVApr 17, 2013
Openjdk
OpenJDK
risk 0.46cvss 3.7epss 0.85
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU.…
CVE-2018-2988MedJul 18, 2018
Oracle Corporation
Marketing
risk 0.45cvss 6.9epss 0.02
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Products). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2018-2634MedJan 18, 2018
Sun Corporation
Java SE
risk 0.45cvss 6.8epss 0.05
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-10370MedOct 19, 2017
Oracle Corporation
Hospitality Guest Access
risk 0.45cvss 6.9epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-10058MedAug 8, 2017
Oracle Corporation
Business Intelligence
risk 0.45cvss 6.9epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high…
CVE-2016-3447MedApr 21, 2016
Oracle Corporation
Applications Framework
risk 0.45cvss 6.9epss 0.01
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.
CVE-2012-1695MedMay 3, 2012
Sun Corporation
Jdk
risk 0.45cvss 6.8epss 0.04
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2026-34325MedApr 21, 2026
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.44cvss 6.8epss 0.00
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows…
CVE-2026-34314MedApr 21, 2026
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.44cvss 6.8epss 0.00
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low…
CVE-2018-2888MedJul 18, 2018
Oracle Corporation
MICROS Retail-J
risk 0.44cvss 6.7epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to…
CVE-2018-3639MedMay 22, 2018
Microsoft
Windows Server 2008
risk 0.44cvss 5.5epss 0.61
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis,…
CVE-2018-2583MedJan 18, 2018
Oracle Corporation
Mysql Server
risk 0.44cvss 6.8epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Stored Procedure). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2017-10274MedOct 19, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.44cvss 6.8epss 0.03
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2017-10235MedAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.44cvss 6.7epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10198MedAug 8, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.44cvss 6.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…
CVE-2017-10181MedAug 8, 2017
Oracle Corporation
Flexcube Direct Banking
risk 0.44cvss 6.8epss 0.01
Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Forgot Password). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10039MedAug 8, 2017
Oracle Corporation
Agile Plm
risk 0.44cvss 6.8epss 0.02
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10004MedAug 8, 2017
Oracle Corporation
Solaris
risk 0.44cvss 6.7epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3485MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.44cvss 6.8epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit…
CVE-2017-3312MedJan 27, 2017
MariaDB
MariaDB
risk 0.44cvss 6.7epss 0.00
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2016-8318MedJan 27, 2017
Oracle Corporation
MySQL
risk 0.44cvss 6.8epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2016-5610MedOct 25, 2016
Oracle Corporation
VM Virtualbox
risk 0.44cvss 6.8epss 0.00
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
CVE-2016-5540MedOct 25, 2016
Oracle Corporation
Retail Applications
risk 0.44cvss 6.7epss 0.00
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5538MedOct 25, 2016
Oracle Corporation
VM Virtualbox
risk 0.44cvss 6.7epss 0.00
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.

Page 21 of 202