Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-2903	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Oct 16, 2019	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2902	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Oct 16, 2019	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2901	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Oct 16, 2019	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-9514	Fedoraproject Fedora	Hig	0.48	7.5	0.83		Aug 13, 2019	Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the…
CVE-2019-2855	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2854	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2852	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2835	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2792	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2764	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2759	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2756	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2727	Oracle Corporation Application Testing Suite	Hig	0.48	7.3	0.01		Jul 23, 2019	Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). The supported version that is affected is 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2608	Oracle Corporation Outside In Technology	Hig	0.48	7.3	0.01		Apr 23, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2558	Oracle Corporation Retail Point Of Service	Hig	0.48	7.3	0.01		Apr 23, 2019	Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2424	Oracle Corporation Retail Convenience Store Back Office	Hig	0.48	7.3	0.01		Apr 23, 2019	Vulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail Applications (subcomponent: Level 3 Maintenance Functions). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3275	Oracle Corporation Solaris	Hig	0.48	7.4	0.02		Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2018-1656	IBM SDK	Hig	0.48	7.4	0.05		Aug 20, 2018	The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
CVE-2018-2990	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.48	7.4	0.02		Jul 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2966	Oracle Corporation Primavera Unifier	Hig	0.48	7.4	0.01		Jul 18, 2018	Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2920	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.48	7.4	0.01		Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2018-2850	Oracle Corporation Hospitality Cruise Fleet Management	Hig	0.48	7.3	0.01		Apr 19, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is 9.x. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2804	Oracle Corporation Application Object Library	Hig	0.48	7.4	0.02		Apr 19, 2018	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated…
CVE-2018-2783	Sun Corporation Java SE	Hig	0.48	7.4	0.04		Apr 19, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows…
CVE-2018-2774	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.48	7.3	0.02		Apr 19, 2018	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2742	Oracle Corporation Enterprise Manager Ops Center	Hig	0.48	7.3	0.02		Apr 19, 2018	Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2660	Oracle Corporation Financial Services Analytical Applications Infrastructure	Hig	0.48	7.4	0.01		Jan 18, 2018	Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows low privileged…
CVE-2018-2637	Sun Corporation Java SE	Hig	0.48	7.4	0.05		Jan 18, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…
CVE-2018-2568	Oracle Corporation Integrated Lights Out Manager Firmware	Hig	0.48	7.3	0.01		Jan 18, 2018	Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and 4.x. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10391	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.02		Oct 19, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10333	Oracle Corporation Siebel UI Framework	Hig	0.48	7.4	0.01		Oct 19, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-10265	Oracle Corporation Sun Systems Products Suite	Hig	0.48	7.3	0.01		Oct 19, 2017	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10206	Oracle Corporation Hospitality Simphony	Hig	0.48	7.3	0.02		Aug 8, 2017	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10145	Oracle Corporation Java Advanced Management Console	Hig	0.48	7.4	0.02		Aug 8, 2017	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10104	Oracle Corporation Java Advanced Management Console	Hig	0.48	7.4	0.01		Aug 8, 2017	Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-10019	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.48	7.4	0.02		Aug 8, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3547	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.48	7.4	0.02		Apr 24, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3507	Oracle Corporation Service Bus	Hig	0.48	7.3	0.02		Apr 24, 2017	Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3497	Oracle Corporation Solaris	Hig	0.48	7.3	0.02		Apr 24, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols…
CVE-2017-3250	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.01		Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3249	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.01		Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to…
CVE-2016-8310	Oracle Corporation Flexcube Universal Banking	Hig	0.48	7.3	0.02		Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-5564	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.48	7.4	0.01		Oct 25, 2016	Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…
CVE-2016-5526	Oracle Corporation Agile Plm	Hig	0.48	7.3	0.01		Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.
CVE-2016-5446	Oracle Corporation Sun Systems Products Suite	Hig	0.48	7.3	0.02		Jul 21, 2016	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure.
CVE-2016-3585	Oracle Corporation Sun Systems Products Suite	Hig	0.48	7.4	0.02		Jul 21, 2016	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality and integrity via vectors related to Emulex.
CVE-2016-3561	Oracle Corporation Agile Plm	Hig	0.48	7.3	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SDK.
CVE-2016-3421	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.48	7.4	0.01		Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide.
CVE-2015-4902	Sun Corporation Java SE	Med	0.48	5.3	0.14	KEV	Oct 22, 2015	Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2015-1789	OpenSSL Project OpenSSL	Hig	0.48	7.5	0.76		Jun 12, 2015	The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in…

CVE-2019-2903HigOct 16, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2902HigOct 16, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-2901HigOct 16, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2019-9514HigAug 13, 2019
Fedoraproject
Fedora
risk 0.48cvss 7.5epss 0.83
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the…
CVE-2019-2855HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2854HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2852HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2835HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2792HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2764HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2759HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2756HigJul 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2727HigJul 23, 2019
Oracle Corporation
Application Testing Suite
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). The supported version that is affected is 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2608HigApr 23, 2019
Oracle Corporation
Outside In Technology
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2558HigApr 23, 2019
Oracle Corporation
Retail Point Of Service
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2019-2424HigApr 23, 2019
Oracle Corporation
Retail Convenience Store Back Office
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail Applications (subcomponent: Level 3 Maintenance Functions). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3275HigOct 17, 2018
Oracle Corporation
Solaris
risk 0.48cvss 7.4epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2018-1656HigAug 20, 2018
IBM
SDK
risk 0.48cvss 7.4epss 0.05
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
CVE-2018-2990HigJul 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.48cvss 7.4epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2966HigJul 18, 2018
Oracle Corporation
Primavera Unifier
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2920HigJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2018-2850HigApr 19, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is 9.x. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2804HigApr 19, 2018
Oracle Corporation
Application Object Library
risk 0.48cvss 7.4epss 0.02
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated…
CVE-2018-2783HigApr 19, 2018
Sun Corporation
Java SE
risk 0.48cvss 7.4epss 0.04
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows…
CVE-2018-2774HigApr 19, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.48cvss 7.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2742HigApr 19, 2018
Oracle Corporation
Enterprise Manager Ops Center
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2660HigJan 18, 2018
Oracle Corporation
Financial Services Analytical Applications Infrastructure
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows low privileged…
CVE-2018-2637HigJan 18, 2018
Sun Corporation
Java SE
risk 0.48cvss 7.4epss 0.05
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…
CVE-2018-2568HigJan 18, 2018
Oracle Corporation
Integrated Lights Out Manager Firmware
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and 4.x. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10391HigOct 19, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10333HigOct 19, 2017
Oracle Corporation
Siebel UI Framework
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-10265HigOct 19, 2017
Oracle Corporation
Sun Systems Products Suite
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10206HigAug 8, 2017
Oracle Corporation
Hospitality Simphony
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10145HigAug 8, 2017
Oracle Corporation
Java Advanced Management Console
risk 0.48cvss 7.4epss 0.02
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10104HigAug 8, 2017
Oracle Corporation
Java Advanced Management Console
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-10019HigAug 8, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.48cvss 7.4epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3547HigApr 24, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.48cvss 7.4epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access…
CVE-2017-3507HigApr 24, 2017
Oracle Corporation
Service Bus
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with…
CVE-2017-3497HigApr 24, 2017
Oracle Corporation
Solaris
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols…
CVE-2017-3250HigJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3249HigJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to…
CVE-2016-8310HigJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-5564HigOct 25, 2016
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.48cvss 7.4epss 0.01
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…
CVE-2016-5526HigOct 25, 2016
Oracle Corporation
Agile Plm
risk 0.48cvss 7.3epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.
CVE-2016-5446HigJul 21, 2016
Oracle Corporation
Sun Systems Products Suite
risk 0.48cvss 7.3epss 0.02
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure.
CVE-2016-3585HigJul 21, 2016
Oracle Corporation
Sun Systems Products Suite
risk 0.48cvss 7.4epss 0.02
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality and integrity via vectors related to Emulex.
CVE-2016-3561HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.48cvss 7.3epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SDK.
CVE-2016-3421HigApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.48cvss 7.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide.
CVE-2015-4902MedKEVOct 22, 2015
Sun Corporation
Java SE
risk 0.48cvss 5.3epss 0.14
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2015-1789HigJun 12, 2015
OpenSSL Project
OpenSSL
risk 0.48cvss 7.5epss 0.76
The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in…

Page 75 of 270