VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,031 total · sorted by risk
  • CVE-2018-2780MedApr 19, 2018
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2018-2775MedApr 19, 2018
    Oracle Corporation
    MySQL
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2018-2747MedApr 19, 2018
    Oracle Corporation
    Banking Corporate Lending
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2738MedApr 19, 2018
    Oracle Corporation
    Retail Central Office
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2018-2737MedApr 19, 2018
    Oracle Corporation
    Retail Returns Management
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-2587MedApr 19, 2018
    Oracle Corporation
    Access Manager
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2730MedJan 18, 2018
    Oracle Corporation
    Retail Merchandising System
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2715MedJan 18, 2018
    Oracle Corporation
    Oracle Business Intelligence Enterprise Edition
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2018-2702MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Fscm
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-2695MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2671MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Scm Purchasing
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2643MedJan 18, 2018
    Oracle Corporation
    Argus Safety
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Case Selection). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2642MedJan 18, 2018
    Oracle Corporation
    Argus Safety
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: File Upload). Supported versions that are affected are 7.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2619MedJan 18, 2018
    Oracle Corporation
    Hospitality Simphony
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-2605MedJan 18, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2017-10427MedOct 19, 2017
    Oracle Corporation
    Retail Xstore Point Of Service
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2017-10421MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10420MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10418MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Products
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10384MedOct 19, 2017
    MariaDB
    MariaDB
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2017-10379MedOct 19, 2017
    MariaDB
    MariaDB
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2017-10361MedOct 19, 2017
    Oracle Corporation
    Hospitality Cruise Shipboard Property Management System
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2017-10358MedOct 19, 2017
    Oracle Corporation
    Hyperion Financial Reporting
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2017-10344MedOct 19, 2017
    Oracle Corporation
    Hospitality Simphony
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10343MedOct 19, 2017
    Oracle Corporation
    Hospitality Simphony
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10316MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10280MedOct 19, 2017
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2017-10261MedOct 19, 2017
    Oracle Corporation
    Database Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML…

  • CVE-2017-10167MedOct 19, 2017
    Oracle Corporation
    MySQL
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2017-10152MedOct 19, 2017
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2017-10077MedOct 19, 2017
    Oracle Corporation
    Applications Dba
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with…

  • CVE-2016-6796HigAug 11, 2017
    Apache
    Tomcat
    risk 0.42cvss 7.5epss 0.08

    A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

  • CVE-2016-6797HigAug 10, 2017
    Apache
    Tomcat
    risk 0.42cvss 7.5epss 0.08

    The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application.…

  • CVE-2017-3634MedAug 8, 2017
    Oracle Corporation
    MySQL
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2017-3633MedAug 8, 2017
    Oracle Corporation
    MySQL
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached…

  • CVE-2017-3562MedAug 8, 2017
    Oracle Corporation
    Applications Dba
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network…

  • CVE-2017-10243MedAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…

  • CVE-2017-10224MedAug 8, 2017
    Oracle Corporation
    Hospitality Inventory Management
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2017-10216MedAug 8, 2017
    Oracle Corporation
    Hospitality Suite8 Property Interfaces
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2017-10212MedAug 8, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2017-10183MedAug 8, 2017
    Oracle Corporation
    Retail Xstore Point Of Service
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated…

  • CVE-2017-10179MedAug 8, 2017
    Oracle Corporation
    Application Management Pack
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported versions that are affected are AMP 12.1.0.4.0 and AMP 13.1.1.1.0. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2017-10157MedAug 8, 2017
    Oracle Corporation
    Fusion Middleware
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10131MedAug 8, 2017
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged…

  • CVE-2017-10103MedAug 8, 2017
    Oracle Corporation
    Flexcube Private Banking
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2017-10084MedAug 8, 2017
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable…

  • CVE-2017-10076MedAug 8, 2017
    Oracle Corporation
    Hospitality Simphony First Edition Venue Management
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Oracle Hospitality Simphony First Edition Venue Management component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 3.9. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2017-10047MedAug 8, 2017
    Oracle Corporation
    Micros Bellavita
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MICROS BellaVita component of Oracle Hospitality Applications (subcomponent: Interface). The supported version that is affected is 2.7.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS…

  • CVE-2017-10038MedAug 8, 2017
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2017-10023MedAug 8, 2017
    Oracle Corporation
    Flexcube Private Banking
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with…

Page 53 of 201