Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-2466	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2465	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2464	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2461	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2460	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2459	Oracle Corporation Fusion Middleware	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2458	Oracle Corporation Fusion Middleware	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2457	Oracle Corporation Outside In Technology	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2441	Oracle Corporation Weblogic Server	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2427	Oracle Corporation Fusion Middleware	Med	0.35	5.3	0.01	Jan 16, 2019	Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2419	Oracle Corporation Peoplesoft Products	Med	0.35	5.4	0.01	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and Approval Builder). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2019-2404	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.3	0.02	Jan 16, 2019	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2395	Oracle Corporation Weblogic Server	Med	0.35	5.4	0.01	Jan 16, 2019	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3268	Oracle Corporation Solaris	Med	0.35	5.3	0.03	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3267	Oracle Corporation Solaris	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LFTP). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via FTP to compromise Solaris. Successful…
CVE-2018-3261	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3254	Oracle Corporation Fusion Middleware	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3244	Oracle Corporation Application Object Library	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3239	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3237	Oracle Corporation Applications Manager	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3215	Oracle Corporation Endeca Information Discovery Integrator	Med	0.35	5.4	0.01	Oct 17, 2018	Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware (subcomponent: Integrator ETL). Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3214	Oracle Corporation Jrockit	Med	0.35	5.3	0.07	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows…
CVE-2018-3210	Oracle Corporation Glassfish Server	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3202	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3198	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.3	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3174	Oracle Corporation Mysql Server	Med	0.35	5.3	0.01	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker…
CVE-2018-3172	Oracle Corporation Solaris	Med	0.35	5.3	0.03	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris.…
CVE-2018-3130	Oracle Corporation Peoplesoft Products	Med	0.35	5.4	0.01	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-16959	Oracle Corporation WebCenter Interaction Portal	Med	0.35	5.3	0.01	Sep 18, 2018	An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/…
CVE-2018-16958	Oracle Corporation WebCenter Interaction Portal	Med	0.35	5.4	0.01	Sep 18, 2018	An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) with ASP.NET is used, is not protected with the HttpOnly attribute. The attribute cannot be enabled by customers.…
CVE-2018-3101	Oracle Corporation Webcenter Portal	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3074	Oracle Corporation Mysql Server	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-3072	Oracle Corporation Peoplesoft Enterprise Hrms	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
CVE-2018-3062	Oracle Corporation Mysql Server	Med	0.35	5.3	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2018-3049	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3048	Oracle Corporation Banking Corporate Lending	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3047	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low…
CVE-2018-3046	Oracle Corporation Banking Corporate Lending	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3045	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3044	Oracle Corporation Banking Corporate Lending	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3043	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.4	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3042	Oracle Corporation Banking Corporate Lending	Med	0.35	5.4	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3039	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows…
CVE-2018-3038	Oracle Corporation Banking Corporate Lending	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3034	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3033	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3032	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3031	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3029	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3026	Oracle Corporation Banking Payments	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…

CVE-2019-2466MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2465MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2464MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2461MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2460MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2459MedJan 16, 2019
Oracle Corporation
Fusion Middleware
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2458MedJan 16, 2019
Oracle Corporation
Fusion Middleware
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2457MedJan 16, 2019
Oracle Corporation
Outside In Technology
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2441MedJan 16, 2019
Oracle Corporation
Weblogic Server
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2427MedJan 16, 2019
Oracle Corporation
Fusion Middleware
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2019-2419MedJan 16, 2019
Oracle Corporation
Peoplesoft Products
risk 0.35cvss 5.4epss 0.01
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and Approval Builder). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2019-2404MedJan 16, 2019
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2019-2395MedJan 16, 2019
Oracle Corporation
Weblogic Server
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3268MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.35cvss 5.3epss 0.03
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3267MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LFTP). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via FTP to compromise Solaris. Successful…
CVE-2018-3261MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3254MedOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3244MedOct 17, 2018
Oracle Corporation
Application Object Library
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3239MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3237MedOct 17, 2018
Oracle Corporation
Applications Manager
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3215MedOct 17, 2018
Oracle Corporation
Endeca Information Discovery Integrator
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware (subcomponent: Integrator ETL). Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3214MedOct 17, 2018
Oracle Corporation
Jrockit
risk 0.35cvss 5.3epss 0.07
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows…
CVE-2018-3210MedOct 17, 2018
Oracle Corporation
Glassfish Server
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-3202MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3198MedOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-3174MedOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.35cvss 5.3epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker…
CVE-2018-3172MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.35cvss 5.3epss 0.03
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris.…
CVE-2018-3130MedOct 17, 2018
Oracle Corporation
Peoplesoft Products
risk 0.35cvss 5.4epss 0.01
Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2018-16959MedSep 18, 2018
Oracle Corporation
WebCenter Interaction Portal
risk 0.35cvss 5.3epss 0.01
An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/…
CVE-2018-16958MedSep 18, 2018
Oracle Corporation
WebCenter Interaction Portal
risk 0.35cvss 5.4epss 0.01
An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) with ASP.NET is used, is not protected with the HttpOnly attribute. The attribute cannot be enabled by customers.…
CVE-2018-3101MedJul 18, 2018
Oracle Corporation
Webcenter Portal
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-3074MedJul 18, 2018
Oracle Corporation
Mysql Server
risk 0.35cvss 5.3epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…
CVE-2018-3072MedJul 18, 2018
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.35cvss 5.3epss 0.02
Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
CVE-2018-3062MedJul 18, 2018
Oracle Corporation
Mysql Server
risk 0.35cvss 5.3epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2018-3049MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3048MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3047MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low…
CVE-2018-3046MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3045MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3044MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3043MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.4epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low…
CVE-2018-3042MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.4epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged…
CVE-2018-3039MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows…
CVE-2018-3038MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3034MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3033MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3032MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3031MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3029MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-3026MedJul 18, 2018
Oracle Corporation
Banking Payments
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker…

Page 79 of 201