Vendor CVEs

Oracle Corporation

All CVEs

10,083 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-10048	Oracle Corporation Enterprise Repository	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware (subcomponent: Web Interface). Supported versions that are affected are 11.1.1.7.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10043	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10040	Oracle Corporation Webcenter Content	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10035	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI…
CVE-2017-10030	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10029	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10028	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10025	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI…
CVE-2017-10024	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-7668	Apache HTTP Server	Hig	0.53	7.5	0.57	Jun 20, 2017	The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a…
CVE-2017-3625	Oracle Corporation Webcenter Content	Hig	0.53	8.2	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2017-3602	Oracle Corporation Webcenter Sites	Hig	0.53	8.1	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3601	Oracle Corporation API Gateway	Hig	0.53	8.1	0.02	Apr 24, 2017	Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway). The supported version that is affected is 11.1.2.4.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3583	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.53	8.1	0.02	Apr 24, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows…
CVE-2017-3564	Oracle Corporation Solaris	Hig	0.53	8.2	0.00	Apr 24, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3554	Oracle Corporation Webcenter Sites	Hig	0.53	8.1	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3545	Oracle Corporation Webcenter Sites	Hig	0.53	8.2	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3541	Oracle Corporation Webcenter Sites	Hig	0.53	8.2	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3472	Oracle Corporation Flexcube Private Banking	Hig	0.53	8.1	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged…
CVE-2017-3443	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3442	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3441	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3440	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3439	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3438	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3437	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3436	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3435	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3433	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3431	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3430	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3429	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3428	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3427	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3426	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3425	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3424	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3423	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3422	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3421	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3420	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3419	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3418	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3417	Oracle Corporation Universal Work Queue	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3416	Oracle Corporation Universal Work Queue	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3415	Oracle Corporation Universal Work Queue	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3414	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3413	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3412	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3411	Oracle Corporation Advanced Outbound Telephony	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…

CVE-2017-10048HigAug 8, 2017
Oracle Corporation
Enterprise Repository
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware (subcomponent: Web Interface). Supported versions that are affected are 11.1.1.7.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10043HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10040HigAug 8, 2017
Oracle Corporation
Webcenter Content
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10035HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI…
CVE-2017-10030HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10029HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10028HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10025HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI…
CVE-2017-10024HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-7668HigJun 20, 2017
Apache
HTTP Server
risk 0.53cvss 7.5epss 0.57
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a…
CVE-2017-3625HigApr 24, 2017
Oracle Corporation
Webcenter Content
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2017-3602HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3601HigApr 24, 2017
Oracle Corporation
API Gateway
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway). The supported version that is affected is 11.1.2.4.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3583HigApr 24, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows…
CVE-2017-3564HigApr 24, 2017
Oracle Corporation
Solaris
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3554HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3545HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3541HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3472HigApr 24, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged…
CVE-2017-3443HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3442HigJan 27, 2017
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3441HigJan 27, 2017
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3440HigJan 27, 2017
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3439HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3438HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3437HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3436HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3435HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3433HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3431HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3430HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3429HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3428HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3427HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3426HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3425HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3424HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3423HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3422HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3421HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3420HigJan 27, 2017
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3419HigJan 27, 2017
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3418HigJan 27, 2017
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-3417HigJan 27, 2017
Oracle Corporation
Universal Work Queue
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3416HigJan 27, 2017
Oracle Corporation
Universal Work Queue
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3415HigJan 27, 2017
Oracle Corporation
Universal Work Queue
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3414HigJan 27, 2017
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3413HigJan 27, 2017
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3412HigJan 27, 2017
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3411HigJan 27, 2017
Oracle Corporation
Advanced Outbound Telephony
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…

Page 23 of 202