Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-9515	Fedoraproject Fedora	Hig	0.56	7.5	0.87	Aug 13, 2019	Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame…
CVE-2019-2750	Oracle Corporation Micros Retail J	Hig	0.56	8.6	0.02	Jul 23, 2019	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 12.1.0, 12.1.1, 12.1.2 and 13.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3311	Oracle Corporation Retail Xstore Payment	Hig	0.56	8.6	0.02	Jan 16, 2019	Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security). The supported version that is affected is 3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3298	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3297	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3296	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3295	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3293	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3292	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3291	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3290	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3289	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3288	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3287	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-2909	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3090	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jul 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3089	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jul 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3088	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jul 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3087	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jul 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3086	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jul 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3007	Oracle Corporation Tuxedo	Hig	0.56	8.6	0.02	Jul 18, 2018	Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle…
CVE-2018-2907	Oracle Corporation Hyperion Financial Reporting	Hig	0.56	8.6	0.02	Jul 18, 2018	Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-2832	Oracle Corporation Goldengate	Hig	0.56	8.6	0.02	Apr 19, 2018	Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. The supported version that is affected is 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. While the vulnerability is in…
CVE-2018-2829	Oracle Corporation Hospitality Simphony	Hig	0.56	8.6	0.02	Apr 19, 2018	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2690	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2689	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2688	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2687	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2686	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2685	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.00	Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2624	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.56	8.6	0.02	Jan 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2608	Oracle Corporation Hospitality Simphony	Hig	0.56	8.6	0.01	Jan 18, 2018	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10147	Oracle Corporation Weblogic Server	Hig	0.56	8.6	0.04	Aug 8, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3730	OpenSSL Project OpenSSL	Hig	0.56	7.5	0.50	May 4, 2017	In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.
CVE-2017-3543	Oracle Corporation Webcenter Sites	Hig	0.56	8.6	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3542	Oracle Corporation Webcenter Sites	Hig	0.56	8.6	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3540	Oracle Corporation Webcenter Sites	Hig	0.56	8.6	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3230	Oracle Corporation Fusion Middleware Mapviewer	Hig	0.56	8.6	0.02	Apr 24, 2017	Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 11.1.1.9, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3293	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3271	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-5588	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5579	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5578	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5577	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5574	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5558	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.03	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-6250	Libarchive Libarchive	Hig	0.56	8.6	0.07	Sep 21, 2016	Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
CVE-2016-3596	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3595	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3594	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…

CVE-2019-9515HigAug 13, 2019
Fedoraproject
Fedora
risk 0.56cvss 7.5epss 0.87
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame…
CVE-2019-2750HigJul 23, 2019
Oracle Corporation
Micros Retail J
risk 0.56cvss 8.6epss 0.02
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 12.1.0, 12.1.1, 12.1.2 and 13.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3311HigJan 16, 2019
Oracle Corporation
Retail Xstore Payment
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security). The supported version that is affected is 3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3298HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3297HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3296HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3295HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3293HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3292HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3291HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3290HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3289HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3288HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3287HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-2909HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3090HigJul 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3089HigJul 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3088HigJul 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3087HigJul 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3086HigJul 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-3007HigJul 18, 2018
Oracle Corporation
Tuxedo
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle…
CVE-2018-2907HigJul 18, 2018
Oracle Corporation
Hyperion Financial Reporting
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-2832HigApr 19, 2018
Oracle Corporation
Goldengate
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. The supported version that is affected is 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. While the vulnerability is in…
CVE-2018-2829HigApr 19, 2018
Oracle Corporation
Hospitality Simphony
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2690HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2689HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2688HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2687HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2686HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2685HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…
CVE-2018-2624HigJan 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2608HigJan 18, 2018
Oracle Corporation
Hospitality Simphony
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10147HigAug 8, 2017
Oracle Corporation
Weblogic Server
risk 0.56cvss 8.6epss 0.04
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3730HigMay 4, 2017
OpenSSL Project
OpenSSL
risk 0.56cvss 7.5epss 0.50
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.
CVE-2017-3543HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3542HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3540HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3230HigApr 24, 2017
Oracle Corporation
Fusion Middleware Mapviewer
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 11.1.1.9, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network…
CVE-2017-3293HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3271HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-5588HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5579HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5578HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5577HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5574HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5558HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.03
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-6250HigSep 21, 2016
Libarchive
Libarchive
risk 0.56cvss 8.6epss 0.07
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
CVE-2016-3596HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3595HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3594HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…

Page 28 of 270