Vendor CVEs

Oracle Corporation

All CVEs

10,077 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-14720	Oracle Corporation Internet Expenses	Hig	0.50	7.7	0.01	Jul 15, 2020	Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-14719	Oracle Corporation Internet Expenses	Hig	0.50	7.7	0.01	Jul 15, 2020	Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2802	Oracle Corporation GraalVM Enterprise Edition	Hig	0.50	7.7	0.01	Apr 15, 2020	Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). Supported versions that are affected are 19.3.1 and 20.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2020-11112	Fasterxml Jackson Databind	Hig	0.50	8.8	0.04	Mar 31, 2020	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
CVE-2020-2511	Oracle Corporation Core Rdbms	Hig	0.50	7.7	0.01	Jan 15, 2020	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to…
CVE-2019-2986	Oracle Corporation GraalVM Enterprise Edition	Hig	0.50	7.7	0.01	Oct 16, 2019	Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2019-2932	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.50	7.7	0.01	Oct 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2890	Oracle Corporation Weblogic Server	Hig	0.50	7.2	0.38	Oct 16, 2019	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3…
CVE-2019-2833	Oracle Corporation Hospitality Simphony	Hig	0.50	7.7	0.01	Jul 23, 2019	Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows low privileged attacker having Import/Export privilege with network access via HTTP to…
CVE-2019-2813	Oracle Corporation GraalVM Enterprise Edition	Hig	0.50	7.7	0.01	Jul 23, 2019	Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: GraalVM). The supported version that is affected is 19.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3111	Oracle Corporation Retail Xstore Office	Hig	0.50	7.6	0.01	Jul 23, 2019	Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2402	Oracle Corporation Hospitality Simphony	Hig	0.50	7.7	0.02	Jan 16, 2019	Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality…
CVE-2018-3208	Oracle Corporation Hyperion Data Relationship Management	Hig	0.50	7.7	0.02	Oct 17, 2018	Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and Security). The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3160	Oracle Corporation Hospitality Cruise Shipboard Property Management System	Hig	0.50	7.7	0.01	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged…
CVE-2018-3155	Oracle Corporation Mysql Server	Hig	0.50	7.7	0.04	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2018-3142	Oracle Corporation Hyperion Essbase Administration Services	Hig	0.50	7.7	0.02	Oct 17, 2018	Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3115	Oracle Corporation Retail Sales Audit	Hig	0.50	7.7	0.01	Oct 17, 2018	Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2926	Oracle Corporation Solaris	Hig	0.50	7.6	0.01	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise…
CVE-2018-2908	Oracle Corporation Solaris	Hig	0.50	7.7	0.02	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the…
CVE-2018-2882	Oracle Corporation MICROS Retail-J	Hig	0.50	7.7	0.01	Jul 18, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2849	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.50	7.7	0.01	Apr 19, 2018	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged…
CVE-2018-2840	Oracle Corporation Retail Xstore Point Of Service	Hig	0.50	7.6	0.01	Apr 19, 2018	Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-2824	Oracle Corporation Hospitality Simphony	Hig	0.50	7.7	0.01	Apr 19, 2018	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2811	Sun Corporation Java SE	Hig	0.50	7.7	0.00	Apr 19, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to…
CVE-2018-2794	Sun Corporation Java SE	Hig	0.50	7.7	0.01	Apr 19, 2018	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2018-2770	Oracle Corporation Adaptive Access Manager	Hig	0.50	7.6	0.01	Apr 19, 2018	Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware (subcomponent: OAAM Admin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2755	Oracle Corporation Mysql Server	Hig	0.50	7.7	0.01	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2018-2754	Oracle Corporation Solaris	Hig	0.50	7.7	0.00	Apr 19, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2733	Oracle Corporation Hyperion Planning	Hig	0.50	7.6	0.01	Jan 18, 2018	Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4.007. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2018-2566	Oracle Corporation Integrated Lights Out Manager Firmware	Hig	0.50	7.7	0.01	Jan 18, 2018	Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and 4.x. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2017-10309	NetApp Steelstore Cloud Integrated Storage	Hig	0.50	7.1	0.09	Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-10130	Oracle Corporation Istore	Hig	0.50	7.6	0.01	Aug 8, 2017	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10119	Oracle Corporation Service Bus	Hig	0.50	7.6	0.01	Aug 8, 2017	Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: OSB Web Console Design, Admin). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10091	Oracle Corporation Enterprise Manager Base Platform	Hig	0.50	7.7	0.02	Aug 8, 2017	Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10059	Oracle Corporation Fusion Middleware	Hig	0.50	7.6	0.01	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10041	Oracle Corporation Fusion Middleware	Hig	0.50	7.6	0.01	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10000	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.50	7.7	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-3596	Oracle Corporation Webcenter Sites	Hig	0.50	7.6	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3516	Oracle Corporation Solaris	Hig	0.50	7.7	0.02	Apr 24, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple…
CVE-2017-3511	Oracle Corporation Jrockit	Hig	0.50	7.7	0.01	Apr 24, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-3309	MariaDB MariaDB	Hig	0.50	7.7	0.03	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network…
CVE-2017-3308	MariaDB MariaDB	Hig	0.50	7.7	0.03	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access…
CVE-2017-3254	Oracle Corporation Retail Invoice Matching	Hig	0.50	7.6	0.01	Apr 24, 2017	Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-8296	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.50	7.6	0.01	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.
CVE-2016-8281	Oracle Corporation Platform Security For Java	Hig	0.50	7.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5565	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.50	7.7	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.
CVE-2016-5536	Oracle Corporation Platform Security For Java	Hig	0.50	7.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5476	Oracle Corporation Retail Integration Bus	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5475	Oracle Corporation Retail Service Backbone	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5447	Oracle Corporation Sun Systems Products Suite	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2020-14720HigJul 15, 2020
Oracle Corporation
Internet Expenses
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-14719HigJul 15, 2020
Oracle Corporation
Internet Expenses
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2020-2802HigApr 15, 2020
Oracle Corporation
GraalVM Enterprise Edition
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). Supported versions that are affected are 19.3.1 and 20.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2020-11112HigMar 31, 2020
Fasterxml
Jackson Databind
risk 0.50cvss 8.8epss 0.04
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
CVE-2020-2511HigJan 15, 2020
Oracle Corporation
Core Rdbms
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to…
CVE-2019-2986HigOct 16, 2019
Oracle Corporation
GraalVM Enterprise Edition
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2019-2932HigOct 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.50cvss 7.7epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2890HigOct 16, 2019
Oracle Corporation
Weblogic Server
risk 0.50cvss 7.2epss 0.38
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3…
CVE-2019-2833HigJul 23, 2019
Oracle Corporation
Hospitality Simphony
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows low privileged attacker having Import/Export privilege with network access via HTTP to…
CVE-2019-2813HigJul 23, 2019
Oracle Corporation
GraalVM Enterprise Edition
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: GraalVM). The supported version that is affected is 19.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3111HigJul 23, 2019
Oracle Corporation
Retail Xstore Office
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2402HigJan 16, 2019
Oracle Corporation
Hospitality Simphony
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality…
CVE-2018-3208HigOct 17, 2018
Oracle Corporation
Hyperion Data Relationship Management
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and Security). The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3160HigOct 17, 2018
Oracle Corporation
Hospitality Cruise Shipboard Property Management System
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged…
CVE-2018-3155HigOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.50cvss 7.7epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2018-3142HigOct 17, 2018
Oracle Corporation
Hyperion Essbase Administration Services
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3115HigOct 17, 2018
Oracle Corporation
Retail Sales Audit
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2926HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise…
CVE-2018-2908HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the…
CVE-2018-2882HigJul 18, 2018
Oracle Corporation
MICROS Retail-J
risk 0.50cvss 7.7epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2849HigApr 19, 2018
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged…
CVE-2018-2840HigApr 19, 2018
Oracle Corporation
Retail Xstore Point Of Service
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-2824HigApr 19, 2018
Oracle Corporation
Hospitality Simphony
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2811HigApr 19, 2018
Sun Corporation
Java SE
risk 0.50cvss 7.7epss 0.00
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to…
CVE-2018-2794HigApr 19, 2018
Sun Corporation
Java SE
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2018-2770HigApr 19, 2018
Oracle Corporation
Adaptive Access Manager
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware (subcomponent: OAAM Admin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-2755HigApr 19, 2018
Oracle Corporation
Mysql Server
risk 0.50cvss 7.7epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2018-2754HigApr 19, 2018
Oracle Corporation
Solaris
risk 0.50cvss 7.7epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2733HigJan 18, 2018
Oracle Corporation
Hyperion Planning
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4.007. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2018-2566HigJan 18, 2018
Oracle Corporation
Integrated Lights Out Manager Firmware
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and 4.x. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2017-10309HigOct 19, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.50cvss 7.1epss 0.09
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-10130HigAug 8, 2017
Oracle Corporation
Istore
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10119HigAug 8, 2017
Oracle Corporation
Service Bus
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: OSB Web Console Design, Admin). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10091HigAug 8, 2017
Oracle Corporation
Enterprise Manager Base Platform
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10059HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.50cvss 7.6epss 0.01
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher.…
CVE-2017-10041HigAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.50cvss 7.6epss 0.01
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10000HigAug 8, 2017
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-3596HigApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.50cvss 7.6epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3516HigApr 24, 2017
Oracle Corporation
Solaris
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple…
CVE-2017-3511HigApr 24, 2017
Oracle Corporation
Jrockit
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-3309HigApr 24, 2017
MariaDB
MariaDB
risk 0.50cvss 7.7epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network…
CVE-2017-3308HigApr 24, 2017
MariaDB
MariaDB
risk 0.50cvss 7.7epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access…
CVE-2017-3254HigApr 24, 2017
Oracle Corporation
Retail Invoice Matching
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-8296HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.50cvss 7.6epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.
CVE-2016-8281HigOct 25, 2016
Oracle Corporation
Platform Security For Java
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5565HigOct 25, 2016
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.50cvss 7.7epss 0.01
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.
CVE-2016-5536HigOct 25, 2016
Oracle Corporation
Platform Security For Java
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5476HigJul 21, 2016
Oracle Corporation
Retail Integration Bus
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5475HigJul 21, 2016
Oracle Corporation
Retail Service Backbone
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5447HigJul 21, 2016
Oracle Corporation
Sun Systems Products Suite
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Page 28 of 202