Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-3348	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3346	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3344	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3343	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3341	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3340	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3339	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3338	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3336	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3335	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3334	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3333	Oracle Corporation Marketing	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3328	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3327	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3326	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-3325	Oracle Corporation Siebel UI Framework	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3303	Oracle Corporation XML Gateway	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3287	Oracle Corporation Istore	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3285	Oracle Corporation Service Fulfillment Manager	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3284	Oracle Corporation Service Fulfillment Manager	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3279	Oracle Corporation Leads Management	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3278	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3275	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3274	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3263	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low…
CVE-2016-8315	Oracle Corporation Flexcube Investor Servicing	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low…
CVE-2016-8312	Oracle Corporation Flexcube Private Banking	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8298	Oracle Corporation Flexcube Private Banking	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8297	Oracle Corporation Flexcube Universal Banking	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-5688	ImageMagick Imagemagick	Hig	0.53	8.1	0.04	Dec 13, 2016	The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex…
CVE-2016-8293	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-8291	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
CVE-2016-5619	Oracle Corporation Flexcube Universal Banking	Hig	0.53	8.1	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5595	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5587	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5557	Oracle Corporation Advanced Pricing	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5518	Oracle Corporation Agile Engineering Data Management	Hig	0.53	8.1	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5503	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.53	8.2	0.00	Oct 25, 2016	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.
CVE-2016-5491	Oracle Corporation Commerce Service Center	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5489	Oracle Corporation Istore	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
CVE-2016-5482	Oracle Corporation Commerce Guided Search	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5465	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.2	0.02	Jul 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
CVE-2016-5451	Oracle Corporation Siebel UI Framework	Hig	0.53	8.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5468.
CVE-2016-3564	Oracle Corporation TopLink	Hig	0.53	8.1	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle TopLink component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JPA-RS.
CVE-2016-3552	Sun Corporation Java SE	Hig	0.53	8.1	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

CVE-2017-3348HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3346HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3344HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3343HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3341HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3340HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3339HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3338HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3336HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3335HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3334HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3333HigJan 27, 2017
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3328HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3327HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3326HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-3325HigJan 27, 2017
Oracle Corporation
Siebel UI Framework
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3303HigJan 27, 2017
Oracle Corporation
XML Gateway
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3287HigJan 27, 2017
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3285HigJan 27, 2017
Oracle Corporation
Service Fulfillment Manager
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3284HigJan 27, 2017
Oracle Corporation
Service Fulfillment Manager
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3279HigJan 27, 2017
Oracle Corporation
Leads Management
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3278HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3275HigJan 27, 2017
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3274HigJan 27, 2017
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3263HigJan 27, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low…
CVE-2016-8315HigJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low…
CVE-2016-8312HigJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8298HigJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8297HigJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-5688HigDec 13, 2016
ImageMagick
Imagemagick
risk 0.53cvss 8.1epss 0.04
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex…
CVE-2016-8293HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-8291HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
CVE-2016-5619HigOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.53cvss 8.1epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5595HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589HigOct 25, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5587HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586HigOct 25, 2016
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5557HigOct 25, 2016
Oracle Corporation
Advanced Pricing
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5518HigOct 25, 2016
Oracle Corporation
Agile Engineering Data Management
risk 0.53cvss 8.1epss 0.02
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5503HigOct 25, 2016
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.53cvss 8.2epss 0.00
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.
CVE-2016-5491HigOct 25, 2016
Oracle Corporation
Commerce Service Center
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5489HigOct 25, 2016
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
CVE-2016-5482HigOct 25, 2016
Oracle Corporation
Commerce Guided Search
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5465HigJul 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
CVE-2016-5451HigJul 21, 2016
Oracle Corporation
Siebel UI Framework
risk 0.53cvss 8.1epss 0.02
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5468.
CVE-2016-3564HigJul 21, 2016
Oracle Corporation
TopLink
risk 0.53cvss 8.1epss 0.04
Unspecified vulnerability in the Oracle TopLink component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JPA-RS.
CVE-2016-3552HigJul 21, 2016
Sun Corporation
Java SE
risk 0.53cvss 8.1epss 0.00
Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

Page 51 of 270