Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

HTML

Area).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

Cloud

Service

component

of

Oracle

Hospitality

Applications

(subcomponent:

General).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Hospitality

Cloud

Service.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Hospitality

Cloud

Service

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hospitality

Cloud

Service

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Hospitality

Cloud

Service

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

General

Ledger

component

of

Oracle

E-Business

Suite

(subcomponent:

Account

Hierarchy

Manager).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

General

Ledger.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

General

Ledger

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Security).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Hyperion

Financial

Reporting

component

of

Oracle

Hyperion

(subcomponent:

Security

Models).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hyperion

Financial

Reporting.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hyperion

Financial

Reporting

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Smart

Card

IO).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Java

SE

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

iPlanet

Web

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

Admin

Graphical

User

Interface).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iPlanet

Web

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iPlanet

Web

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iPlanet

Web

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

iPlanet

Web

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

BI

Publisher

component

of

Oracle

Fusion

Middleware

(subcomponent:

Web

Service

API).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

BI

Publisher.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

BI

Publisher

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

JCE).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

Java

SE

Embedded

JRockit

accessible

data.

Note:

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

RMI).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Hospitality

Simphony

component

of

Oracle

Hospitality

Applications

(subcomponent:

Import/Export).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Simphony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Simphony

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Elastic

Search).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Fleet

Management

component

of

Oracle

Hospitality

Applications

(subcomponent:

BaseMasterPage).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Cruise

Fleet

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Hospitality

Cruise

Fleet

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Fleet

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Cruise

Fleet

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

JavaFX).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Maintenance

Folders).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

Security).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

Java

SE

Embedded

JRockit

accessible

data.

Note:

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

component

of

Oracle

Fusion

Middleware

(subcomponent:

Analytics

Web

Dashboards).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Business

Intelligence

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Hotspot).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Integration

Broker).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Performance

Monitor).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

PeopleSoft

Enterprise

PT

PeopleTools.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Application

Object

Library

component

of

Oracle

E-Business

Suite

(subcomponent:

Diagnostics).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

AWT).

Supported

versions

that

are

affected

are

Java

SE:

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Hotspot).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Integration

Broker).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Java

Advanced

Management

Console

component

of

Oracle

Java

SE

(subcomponent:

Server).

The

supported

version

that

is

affected

is

Java

Advanced

Management

Console:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Java

Advanced

Management

Console.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

Advanced

Management

Console

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

Advanced

Management

Console

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Java

Advanced

Management

Console

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

CRM

Desktop

component

of

Oracle

Siebel

CRM

(subcomponent:

Siebel

Business

Service

Issues).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

CRM

Desktop.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Siebel

CRM

Desktop

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

component

of

Oracle

E-Business

Suite

(subcomponent:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Global

Order

Promising

component

of

Oracle

E-Business

Suite

(subcomponent:

Reschedule

Sales

Orders).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Global

Order

Promising.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Global

Order

Promising

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Global

Order

Promising

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Hospitality

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Retail

Open

Commerce

Platform

component

of

Oracle

Retail

Applications

(subcomponent:

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Open

Commerce

Platform.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Retail

Open

Commerce

Platform

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Open

Commerce

Platform

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Retail

Open

Commerce

Platform

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Sun

ZFS

Storage

Appliance

Kit

(AK)

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

User

Interface).

The

supported

version

that

is

affected

is

AK

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Sun

ZFS

Storage

Appliance

Kit

(AK).

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Sun

ZFS

Storage

Appliance

Kit

(AK).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

Networking).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

While

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

JRockit

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

Java

SE

Embedded

JRockit

accessible

data.

Note:

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

WebCenter

Content

component

of

Oracle

Fusion

Middleware

(subcomponent:

Content

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Content.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebCenter

Content

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

WebCenter

Content

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Content

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N).


Vulnerability

in

the

Oracle

iStore

component

of

Oracle

E-Business

Suite

(subcomponent:

User

and

Company

Profile).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iStore.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

iStore

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

JCE).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

Java

SE

Embedded

JRockit

accessible

data.

Note:

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

All

Modules).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Reporting

and

Analytics

component

of

Oracle

Hospitality

Applications

(subcomponent:

Report).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Reporting

and

Analytics.

While

the

vulnerability

is

in

Oracle

Hospitality

Reporting

and

Analytics

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Hospitality

Reporting

and

Analytics.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Sun

ZFS

Storage

Appliance

Kit

(AK)

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

User

Interface).

The

supported

version

that

is

affected

is

AK

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Sun

ZFS

Storage

Appliance

Kit

(AK).

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Sun

ZFS

Storage

Appliance

Kit

(AK)

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Sun

ZFS

Storage

Appliance

Kit

(AK).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Simphony

component

of

Oracle

Hospitality

Applications

(subcomponent:

Engagement).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Simphony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Simphony

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Simphony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Agile

PLM

component

of

Oracle

Supply

Chain

Products

Suite

(subcomponent:

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Agile

PLM.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Agile

PLM

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Agile

PLM

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Agile

PLM

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Common

Applications

component

of

Oracle

E-Business

Suite

(subcomponent:

Gantt

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Common

Applications.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Common

Applications

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Common

Applications

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Libraries).

The

supported

version

that

is

affected

is

Java

SE:

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

WebCenter

Content

component

of

Oracle

Fusion

Middleware

(subcomponent:

Content

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Content.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebCenter

Content

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Content

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebCenter

Content

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

SOA

Suite

component

of

Oracle

Fusion

Middleware

(subcomponent:

Fabric

Layer).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

SOA

Suite.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

SOA

Suite

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

SOA

Suite

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

SOA

Suite

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Application

Object

Library

component

of

Oracle

E-Business

Suite

(subcomponent:

Diagnostics).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

Leisure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Retail

Open

Commerce

Platform

component

of

Oracle

Retail

Applications

(subcomponent:

Website).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Open

Commerce

Platform.

While

the

vulnerability

is

in

Oracle

Retail

Open

Commerce

Platform

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Open

Commerce

Platform

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Workcenter).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

UI

Framework

component

of

Oracle

Siebel

CRM

(subcomponent:

UIF

Open

UI).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Siebel

UI

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Siebel

UI

Framework

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Hospitality

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Deployment).

Supported

versions

that

are

affected

are

Java

SE:

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Knowledge

Management

component

of

Oracle

E-Business

Suite

(subcomponent:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Knowledge

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Knowledge

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Knowledge

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Applications

Technology

Stack

component

of

Oracle

E-Business

Suite

(subcomponent:

Oracle

Forms).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Technology

Stack.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Applications

Technology

Stack

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Enterprise

Repository

component

of

Oracle

Fusion

Middleware

(subcomponent:

Web

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Enterprise

Repository.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Enterprise

Repository

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Enterprise

Repository

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Enterprise

Repository

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Hotspot).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Add

New

Image).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Libraries).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

BI

Publisher

component

of

Oracle

Fusion

Middleware

(subcomponent:

BI

Publisher

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

BI

Publisher.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

BI

Publisher

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

BI

Publisher

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

BI

Publisher

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Suites

Management

component

of

Oracle

Hospitality

Applications

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Suites

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Hospitality

Suites

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Suites

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Suites

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

JAXP).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Advanced

Outbound

Telephony

component

of

Oracle

E-Business

Suite

(subcomponent:

Setup

and

Configuration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Outbound

Telephony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Advanced

Outbound

Telephony

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Outbound

Telephony

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Advanced

Outbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Application

Object

Library

component

of

Oracle

E-Business

Suite

(subcomponent:

Attachments).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

iStore

component

of

Oracle

E-Business

Suite

(subcomponent:

Shopping

Cart).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iStore.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

iStore

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Health

Center).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Enterprise

Portal).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

Cloud

Service

component

of

Oracle

Hospitality

Applications

(subcomponent:

General).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Hospitality

Cloud

Service.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Hospitality

Cloud

Service

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hospitality

Cloud

Service

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Hospitality

Cloud

Service

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Performance

Monitor).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

HCM

Human

Resources

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Compensation).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

HCM

Human

Resources.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

HCM

Human

Resources

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

HCM

Human

Resources

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

HCM

Human

Resources

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

The

supported

version

that

is

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Outside

In

Technology

accessible

data.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Hyperion

Common

Events

component

of

Oracle

Hyperion

(subcomponent:

User

Interface).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Hyperion

Common

Events.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Hyperion

Common

Events

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hyperion

Common

Events

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Hyperion

Common

Events

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Trade

Management

component

of

Oracle

E-Business

Suite

(subcomponent:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Trade

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Trade

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Trade

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Trade

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

UI

Framework

component

of

Oracle

Siebel

CRM

(subcomponent:

UIF

Open

UI).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Siebel

UI

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Siebel

UI

Framework

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Retail

Merchandising

System

component

of

Oracle

Retail

Applications

(subcomponent:

Security

(SQL

Logger)).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Merchandising

System.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Merchandising

System

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Retail

Merchandising

System

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

component

of

Oracle

Java

SE

(subcomponent:

Networking).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Applications

Manager

component

of

Oracle

E-Business

Suite

(subcomponent:

Support

Cart).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Applications

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

JRockit

component

of

Oracle

Java

SE

(subcomponent:

Scripting).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

JRockit:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded

JRockit.

While

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

JRockit

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded

JRockit.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Fluid

Core).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

component

of

Oracle

Java

SE

(subcomponent:

Sound).

The

supported

version

that

is

affected

is

Java

SE:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Java

VM

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

VM.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

VM.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

component

of

Oracle

Construction

and

Engineering

Suite

(subcomponent:

Web

Access).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Primavera

Enterprise

Project

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Core

Components).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

JD

Edwards

EnterpriseOne

Tools

component

of

Oracle

JD

Edwards

Products

(subcomponent:

Web

Runtime).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

JD

Edwards

EnterpriseOne

Tools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

JD

Edwards

EnterpriseOne

Tools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

JD

Edwards

EnterpriseOne

Tools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

JD

Edwards

EnterpriseOne

Tools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Activity

Guide).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Core

Components).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Business

Process

Management

Suite

component

of

Oracle

Fusion

Middleware

(subcomponent:

Process

Analysis

Discovery).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Process

Management

Suite.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Business

Process

Management

Suite

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Business

Process

Management

Suite

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

Docker

Images).

The

supported

version

that

is

affected

is

prior

to

Docker

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Application

Management

Pack

for

Oracle

E-Business

Suite

component

of

Oracle

E-Business

Suite

(subcomponent:

User

Monitoring).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Application

Management

Pack

for

Oracle

E-Business

Suite.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Application

Management

Pack

for

Oracle

E-Business

Suite

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Partner

Management

component

of

Oracle

E-Business

Suite

(subcomponent:

Partner

Dashboard).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Partner

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Partner

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Partner

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Partner

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Tuxedo

component

of

Oracle

Fusion

Middleware

(subcomponent:

Core).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

Jolt

to

compromise

Oracle

Tuxedo.

While

the

vulnerability

is

in

Oracle

Tuxedo

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Tuxedo

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Outside

In

Technology

component

of

Oracle

Fusion

Middleware

(subcomponent:

Outside

In

Filters).

The

supported

version

that

is

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Outside

In

Technology

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

LibKMIP).

The

supported

version

that

is

affected

is

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Solaris

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Solaris

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

Application

Object

Library

component

of

Oracle

E-Business

Suite

(subcomponent:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

WebCenter

Portal

component

of

Oracle

Fusion

Middleware

(subcomponent:

Portlet

Services).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Portal.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Portal

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Web

Services).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

iLearning

component

of

Oracle

iLearning

(subcomponent:

Learner

Administration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iLearning.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iLearning

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iLearning

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iLearning

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Hyperion

Common

Events

component

of

Oracle

Hyperion

(subcomponent:

User

Interface).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Hyperion

Common

Events.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Hyperion

Common

Events

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hyperion

Common

Events

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Hyperion

Common

Events

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Web

Services).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebLogic

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Integration

Broker).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

component

of

Oracle

E-Business

Suite

(subcomponent:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Application

Object

Library

component

of

Oracle

E-Business

Suite

(subcomponent:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Application

Object

Library

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Application

Object

Library

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector: