Vendor CVEs

Oracle Corporation

All CVEs

10,037 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-10152	Oracle Corporation Weblogic Server	Med	0.42	6.5	0.02	Oct 19, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10077	Oracle Corporation Applications Dba	Med	0.42	6.5	0.02	Oct 19, 2017	Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2016-6796	Apache Tomcat	Hig	0.42	7.5	0.08	Aug 11, 2017	A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
CVE-2016-6797	Apache Tomcat	Hig	0.42	7.5	0.08	Aug 10, 2017	The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application.…
CVE-2017-3634	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3633	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached…
CVE-2017-3562	Oracle Corporation Applications Dba	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2017-10243	NetApp Steelstore Cloud Integrated Storage	Med	0.42	6.5	0.03	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…
CVE-2017-10224	Oracle Corporation Hospitality Inventory Management	Med	0.42	6.4	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10216	Oracle Corporation Hospitality Suite8 Property Interfaces	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10212	Oracle Corporation Hospitality Suite8	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10183	Oracle Corporation Retail Xstore Point Of Service	Med	0.42	6.5	0.01	Aug 8, 2017	Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-10179	Oracle Corporation Application Management Pack	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are AMP 12.1.0.4.0 and AMP 13.1.1.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-10157	Oracle Corporation Fusion Middleware	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10131	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.42	6.5	0.01	Aug 8, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged…
CVE-2017-10103	Oracle Corporation Flexcube Private Banking	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10084	Oracle Corporation Flexcube Universal Banking	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable…
CVE-2017-10076	Oracle Corporation Hospitality Simphony First Edition Venue Management	Med	0.42	6.4	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality Simphony First Edition Venue Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.9. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-10047	Oracle Corporation Micros Bellavita	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications (subcomponent: Interface). The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS…
CVE-2017-10038	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker…
CVE-2017-10023	Oracle Corporation Flexcube Private Banking	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10006	Oracle Corporation Flexcube Private Banking	Med	0.42	6.5	0.02	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2015-5219	NTP NTP	Hig	0.42	7.5	0.06	Jul 21, 2017	The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
CVE-2017-9735	Eclipse Jetty	Hig	0.42	7.5	0.06	Jun 16, 2017	Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
CVE-2017-3592	Oracle Corporation Payroll	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows high privileged attacker…
CVE-2017-3586	Oracle Corporation Mysql Connectors	Med	0.42	6.4	0.02	Apr 24, 2017	Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2017-3577	Oracle Corporation Peoplesoft Enterprise Cs Campus Community	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3571	Oracle Corporation PeopleSoft Enterprise SCM eBill Payment	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3570	Oracle Corporation Peoplesoft Enterprise Esettlements	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements). The supported version that is affected is 9.1. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2017-3568	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.42	6.5	0.00	Apr 24, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing and Login). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit…
CVE-2017-3534	Oracle Corporation Flexcube Universal Banking	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low…
CVE-2017-3525	Oracle Corporation Peoplesoft Enterprise Scm Services Procurement	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3524	Oracle Corporation Peoplesoft Enterprise Scm Strategic Sourcing	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access…
CVE-2017-3522	Oracle Corporation Peoplesoft Enterprise Scm Esupplier Connection	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3521	Oracle Corporation Peoplesoft Enterprise Scm Purchasing	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP…
CVE-2017-3520	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3517	Oracle Corporation Jd Edwards Enterpriseone	Med	0.42	6.5	0.01	Apr 24, 2017	Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3491	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.1 and 12.1.0. Easily "exploitable" vulnerability allows low…
CVE-2017-3488	Oracle Corporation Flexcube Investor Servicing	Med	0.42	6.5	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2017-3453	MariaDB MariaDB	Med	0.42	6.5	0.03	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network…
CVE-2017-3452	Oracle Corporation MySQL	Med	0.42	6.5	0.02	Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2017-3273	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3258	MariaDB MariaDB	Med	0.42	6.5	0.03	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-3257	MariaDB MariaDB	Med	0.42	6.5	0.03	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3256	Oracle Corporation MySQL	Med	0.42	6.5	0.02	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2016-8311	Oracle Corporation Flexcube Universal Banking	Med	0.42	6.5	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-5548	Oracle Corporation Java SE Embedded	Med	0.42	6.5	0.03	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-5627	Oracle Corporation MySQL	Med	0.42	6.5	0.03	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.
CVE-2016-5585	Oracle Corporation Interaction Center Intelligence	Med	0.42	6.5	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 12.1.1 through 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5572	Oracle Corporation Database Server	Med	0.42	6.4	0.00	Oct 25, 2016	Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2017-10152MedOct 19, 2017
Oracle Corporation
Weblogic Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10077MedOct 19, 2017
Oracle Corporation
Applications Dba
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2016-6796HigAug 11, 2017
Apache
Tomcat
risk 0.42cvss 7.5epss 0.08
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
CVE-2016-6797HigAug 10, 2017
Apache
Tomcat
risk 0.42cvss 7.5epss 0.08
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application.…
CVE-2017-3634MedAug 8, 2017
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3633MedAug 8, 2017
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached…
CVE-2017-3562MedAug 8, 2017
Oracle Corporation
Applications Dba
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2017-10243MedAug 8, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.42cvss 6.5epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…
CVE-2017-10224MedAug 8, 2017
Oracle Corporation
Hospitality Inventory Management
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10216MedAug 8, 2017
Oracle Corporation
Hospitality Suite8 Property Interfaces
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10212MedAug 8, 2017
Oracle Corporation
Hospitality Suite8
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10183MedAug 8, 2017
Oracle Corporation
Retail Xstore Point Of Service
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-10179MedAug 8, 2017
Oracle Corporation
Application Management Pack
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are AMP 12.1.0.4.0 and AMP 13.1.1.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-10157MedAug 8, 2017
Oracle Corporation
Fusion Middleware
risk 0.42cvss 6.5epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10131MedAug 8, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged…
CVE-2017-10103MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10084MedAug 8, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable…
CVE-2017-10076MedAug 8, 2017
Oracle Corporation
Hospitality Simphony First Edition Venue Management
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Simphony First Edition Venue Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.9. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-10047MedAug 8, 2017
Oracle Corporation
Micros Bellavita
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications (subcomponent: Interface). The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS…
CVE-2017-10038MedAug 8, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker…
CVE-2017-10023MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10006MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2015-5219HigJul 21, 2017
NTP
NTP
risk 0.42cvss 7.5epss 0.06
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
CVE-2017-9735HigJun 16, 2017
Eclipse
Jetty
risk 0.42cvss 7.5epss 0.06
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
CVE-2017-3592MedApr 24, 2017
Oracle Corporation
Payroll
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows high privileged attacker…
CVE-2017-3586MedApr 24, 2017
Oracle Corporation
Mysql Connectors
risk 0.42cvss 6.4epss 0.02
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2017-3577MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Cs Campus Community
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3571MedApr 24, 2017
Oracle Corporation
PeopleSoft Enterprise SCM eBill Payment
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3570MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Esettlements
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements). The supported version that is affected is 9.1. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2017-3568MedApr 24, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.42cvss 6.5epss 0.00
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing and Login). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit…
CVE-2017-3534MedApr 24, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low…
CVE-2017-3525MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Scm Services Procurement
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3524MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Scm Strategic Sourcing
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access…
CVE-2017-3522MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Scm Esupplier Connection
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-3521MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Scm Purchasing
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP…
CVE-2017-3520MedApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3517MedApr 24, 2017
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.42cvss 6.5epss 0.01
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3491MedApr 24, 2017
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.1 and 12.1.0. Easily "exploitable" vulnerability allows low…
CVE-2017-3488MedApr 24, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2017-3453MedApr 24, 2017
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network…
CVE-2017-3452MedApr 24, 2017
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2017-3273MedJan 27, 2017
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3258MedJan 27, 2017
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2017-3257MedJan 27, 2017
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2017-3256MedJan 27, 2017
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2016-8311MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-5548MedJan 27, 2017
Oracle Corporation
Java SE Embedded
risk 0.42cvss 6.5epss 0.03
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-5627MedOct 25, 2016
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.
CVE-2016-5585MedOct 25, 2016
Oracle Corporation
Interaction Center Intelligence
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 12.1.1 through 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5572MedOct 25, 2016
Oracle Corporation
Database Server
risk 0.42cvss 6.4epss 0.00
Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Page 50 of 201