Vendor CVEs

Oracle Corporation

All CVEs

10,031 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-2451	Oracle Corporation VM Virtualbox	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2450	Oracle Corporation VM Virtualbox	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2430	Oracle Corporation Argus Safety	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2425	Oracle Corporation Hospitality Reporting And Analytics	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2019-2418	Oracle Corporation Weblogic Server	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2019-2417	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2412	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.42	6.4	0.00	Jan 16, 2019	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store). The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2019-2403	Oracle Corporation Hospitality Simphony	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality…
CVE-2019-2399	Oracle Corporation Communications Diameter Signaling Router	Med	0.42	6.5	0.02	Jan 16, 2019	Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3304	Oracle Corporation Application Testing Suite	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows…
CVE-2018-3303	Oracle Corporation Enterprise Manager Base Platform	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console). Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3125	Oracle Corporation Retail Merchandising System	Med	0.42	6.5	0.01	Jan 16, 2019	Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Security (SQL Logger)). The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3251	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…
CVE-2018-3249	Oracle Corporation Weblogic Server	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3248	Oracle Corporation Weblogic Server	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3236	Oracle Corporation Oracle User Management	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2018-3203	Oracle Corporation Mysql Server	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3182	Oracle Corporation MySQL	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3166	Oracle Corporation Hospitality Cruise Fleet Management	Med	0.42	6.5	0.01	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-3163	Oracle Corporation Hospitality Cruise Fleet Management	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3145	Oracle Corporation Mysql Server	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3137	Oracle Corporation MySQL	Med	0.42	6.5	0.02	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3133	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2887	Oracle Corporation MICROS Retail-J	Med	0.42	6.5	0.01	Oct 17, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-16956	Oracle Corporation WebCenter Interaction Portal	Med	0.42	6.5	0.01	Sep 18, 2018	The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software (such as IIS).…
CVE-2018-3109	Oracle Corporation Fusion Middleware Mapviewer	Med	0.42	6.5	0.02	Aug 2, 2018	Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3108	Oracle Corporation Fusion Middleware	Med	0.42	6.5	0.02	Aug 2, 2018	Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2018-3073	Oracle Corporation Mysql Server	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3060	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3053	Oracle Corporation Retail Customer Management And Segmentation Foundation	Med	0.42	6.4	0.01	Jul 18, 2018	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3052	Oracle Corporation Micros Relate CRM Software	Med	0.42	6.4	0.01	Jul 18, 2018	Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3041	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3040	Oracle Corporation Banking Corporate Lending	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3030	Oracle Corporation Flexcube Investor Servicing	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3022	Oracle Corporation Banking Payments	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3014	Oracle Corporation OPERA 5 Property Services	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3013	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2979	Oracle Corporation Flexcube Universal Banking	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2977	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2968	Oracle Corporation Primavera Unifier	Med	0.42	6.5	0.01	Jul 18, 2018	Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2947	Oracle Corporation Jd Edwards Enterpriseone	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2018-2925	Oracle Corporation Bi Publisher	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2904	Oracle Corporation Communications Eagle Lnp Application Processor	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2861	Oracle Corporation Retail Back Office	Med	0.42	6.5	0.02	Apr 19, 2018	Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2852	Oracle Corporation Hospitality Guest Access	Med	0.42	6.4	0.01	Apr 19, 2018	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2847	Oracle Corporation Hospitality Simphony First Edition	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2823	Oracle Corporation Transportation Management	Med	0.42	6.5	0.01	Apr 19, 2018	Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2805	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). Supported versions that are affected are 5.6.39 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2784	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-2782	Oracle Corporation Mysql Server	Med	0.42	6.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

CVE-2019-2451MedJan 16, 2019
Oracle Corporation
VM Virtualbox
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2450MedJan 16, 2019
Oracle Corporation
VM Virtualbox
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2019-2430MedJan 16, 2019
Oracle Corporation
Argus Safety
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2019-2425MedJan 16, 2019
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2019-2418MedJan 16, 2019
Oracle Corporation
Weblogic Server
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2019-2417MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2019-2412MedJan 16, 2019
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.42cvss 6.4epss 0.00
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store). The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2019-2403MedJan 16, 2019
Oracle Corporation
Hospitality Simphony
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality…
CVE-2019-2399MedJan 16, 2019
Oracle Corporation
Communications Diameter Signaling Router
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3304MedJan 16, 2019
Oracle Corporation
Application Testing Suite
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows…
CVE-2018-3303MedJan 16, 2019
Oracle Corporation
Enterprise Manager Base Platform
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console). Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3125MedJan 16, 2019
Oracle Corporation
Retail Merchandising System
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Security (SQL Logger)). The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3251MedOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…
CVE-2018-3249MedOct 17, 2018
Oracle Corporation
Weblogic Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3248MedOct 17, 2018
Oracle Corporation
Weblogic Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3236MedOct 17, 2018
Oracle Corporation
Oracle User Management
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network…
CVE-2018-3203MedOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3182MedOct 17, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3166MedOct 17, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-3163MedOct 17, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3145MedOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3137MedOct 17, 2018
Oracle Corporation
MySQL
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3133MedOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2887MedOct 17, 2018
Oracle Corporation
MICROS Retail-J
risk 0.42cvss 6.5epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-16956MedSep 18, 2018
Oracle Corporation
WebCenter Interaction Portal
risk 0.42cvss 6.5epss 0.01
The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software (such as IIS).…
CVE-2018-3109MedAug 2, 2018
Oracle Corporation
Fusion Middleware Mapviewer
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3108MedAug 2, 2018
Oracle Corporation
Fusion Middleware
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification Service). Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2018-3073MedJul 18, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2018-3060MedJul 18, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3053MedJul 18, 2018
Oracle Corporation
Retail Customer Management And Segmentation Foundation
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3052MedJul 18, 2018
Oracle Corporation
Micros Relate CRM Software
risk 0.42cvss 6.4epss 0.01
Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3041MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3040MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3030MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3022MedJul 18, 2018
Oracle Corporation
Banking Payments
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3014MedJul 18, 2018
Oracle Corporation
OPERA 5 Property Services
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-3013MedJul 18, 2018
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Config). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2979MedJul 18, 2018
Oracle Corporation
Flexcube Universal Banking
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2977MedJul 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.42cvss 6.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2968MedJul 18, 2018
Oracle Corporation
Primavera Unifier
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2947MedJul 18, 2018
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.42cvss 6.5epss 0.02
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…
CVE-2018-2925MedJul 18, 2018
Oracle Corporation
Bi Publisher
risk 0.42cvss 6.5epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2904MedJul 18, 2018
Oracle Corporation
Communications Eagle Lnp Application Processor
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2861MedApr 19, 2018
Oracle Corporation
Retail Back Office
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2852MedApr 19, 2018
Oracle Corporation
Hospitality Guest Access
risk 0.42cvss 6.4epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2847MedApr 19, 2018
Oracle Corporation
Hospitality Simphony First Edition
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2823MedApr 19, 2018
Oracle Corporation
Transportation Management
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-2805MedApr 19, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). Supported versions that are affected are 5.6.39 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2784MedApr 19, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-2782MedApr 19, 2018
Oracle Corporation
Mysql Server
risk 0.42cvss 6.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

Page 52 of 201