Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-10070	Oracle Corporation Peoplesoft Enterprise Prtl Interaction Hub	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Maintenance Folders). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10064	Oracle Corporation Hospitality Websuite8 Cloud Service	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10052	Oracle Corporation Agile Plm	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PCMServlet). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10049	Oracle Corporation Siebel CRM	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM.…
CVE-2017-10021	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10017	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workcenter). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10005	Oracle Corporation Flexcube Private Banking	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3579	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows…
CVE-2017-3573	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability…
CVE-2017-3537	Oracle Corporation Real Time Scheduler	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2017-3532	Oracle Corporation Retail Warehouse Management System	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 14.0 and 15.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3530	Oracle Corporation Transportation Management	Med	0.40	6.1	0.02	Apr 24, 2017	Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, 6.4.1 and 6.4.2. Easily "exploitable"…
CVE-2017-3501	Oracle Corporation Primavera Unifier	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3496	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.40	6.1	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows…
CVE-2017-3314	Oracle Corporation Flexcube Universal Banking	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3300	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3299	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3298	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2016-8329	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-8320	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8319	Oracle Corporation Flexcube Investor Servicing	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8303	Oracle Corporation Flexcube Universal Banking	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8282	Oracle Corporation Flexcube Private Banking	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5622	Oracle Corporation Flexcube Universal Banking	Med	0.40	6.1	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5606	Oracle Corporation Solaris	Med	0.40	6.1	0.00	Oct 25, 2016	Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Kernel Zones.
CVE-2016-5543	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.40	6.1	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5530	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-5529	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.01	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5530 and…
CVE-2016-5512	Oracle Corporation Supply Chain Products Suite	Med	0.40	6.1	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521.
CVE-2016-5262	Mozilla Corporation Firefox	Med	0.40	6.1	0.01	Aug 5, 2016	Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct…
CVE-2016-3589	Oracle Corporation Flexcube Direct Banking	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-3573	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3571	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3570	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3569	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3568	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3566	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3557	Oracle Corporation Agile Plm	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load.
CVE-2016-3555	Oracle Corporation Agile Plm	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin.
CVE-2016-3519	Oracle Corporation Agile Plm	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut.
CVE-2016-3478	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.
CVE-2016-3448	Oracle Corporation Application Express	Med	0.40	6.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-3463	Oracle Corporation Flexcube Direct Banking	Med	0.40	6.1	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-3416	Oracle Corporation Weblogic Server	Med	0.40	6.1	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVE-2016-0700	Oracle Corporation Weblogic Server	Med	0.40	6.1	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.
CVE-2016-0675	Oracle Corporation Weblogic Server	Med	0.40	6.1	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.
CVE-2016-0672	Oracle Corporation Flexcube Direct Banking	Med	0.40	6.1	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-0640	MariaDB MariaDB	Med	0.40	6.1	0.01	Apr 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
CVE-2016-0479	Oracle Corporation Business Intelligence	Med	0.40	6.1	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard.
CVE-2026-35247	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…

CVE-2017-10070MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Prtl Interaction Hub
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Maintenance Folders). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10064MedAug 8, 2017
Oracle Corporation
Hospitality Websuite8 Cloud Service
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Hospitality WebSuite8 Cloud Service component of Oracle Hospitality Applications (subcomponent: General). Supported versions that are affected are 8.9.6 and 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10052MedAug 8, 2017
Oracle Corporation
Agile Plm
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PCMServlet). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10049MedAug 8, 2017
Oracle Corporation
Siebel CRM
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM (subcomponent: Search). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM.…
CVE-2017-10021MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10017MedAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workcenter). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10005MedAug 8, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3579MedApr 24, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows…
CVE-2017-3573MedApr 24, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability…
CVE-2017-3537MedApr 24, 2017
Oracle Corporation
Real Time Scheduler
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2017-3532MedApr 24, 2017
Oracle Corporation
Retail Warehouse Management System
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 14.0 and 15.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3530MedApr 24, 2017
Oracle Corporation
Transportation Management
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, 6.4.1 and 6.4.2. Easily "exploitable"…
CVE-2017-3501MedApr 24, 2017
Oracle Corporation
Primavera Unifier
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3496MedApr 24, 2017
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows…
CVE-2017-3314MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-3300MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3299MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2017-3298MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2016-8329MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2016-8320MedJan 27, 2017
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8319MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8303MedJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8282MedJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5622MedOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5606MedOct 25, 2016
Oracle Corporation
Solaris
risk 0.40cvss 6.1epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Kernel Zones.
CVE-2016-5543MedOct 25, 2016
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
CVE-2016-5530MedOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-5529MedOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5530 and…
CVE-2016-5512MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521.
CVE-2016-5262MedAug 5, 2016
Mozilla Corporation
Firefox
risk 0.40cvss 6.1epss 0.01
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct…
CVE-2016-3589MedJul 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-3573MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3571MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3570MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3569MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3568MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3566MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different…
CVE-2016-3557MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load.
CVE-2016-3555MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin.
CVE-2016-3519MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut.
CVE-2016-3478MedJul 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.
CVE-2016-3448MedJul 21, 2016
Oracle Corporation
Application Express
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-3463MedApr 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-3416MedApr 21, 2016
Oracle Corporation
Weblogic Server
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVE-2016-0700MedApr 21, 2016
Oracle Corporation
Weblogic Server
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.
CVE-2016-0675MedApr 21, 2016
Oracle Corporation
Weblogic Server
risk 0.40cvss 6.1epss 0.02
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.
CVE-2016-0672MedApr 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-0640MedApr 21, 2016
MariaDB
MariaDB
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
CVE-2016-0479MedApr 21, 2016
Oracle Corporation
Business Intelligence
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard.
CVE-2026-35247MedApr 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…

Page 64 of 201