Vulnerability

in

the

Oracle

Identity

Manager

Connector

component

of

Oracle

Fusion

Middleware

(subcomponent:

Microsoft

Active

Directory).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Identity

Manager

Connector

executes

to

compromise

Oracle

Identity

Manager

Connector.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Identity

Manager

Connector

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Identity

Manager

Connector

accessible

data

and

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Oracle

Identity

Manager

Connector.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H).


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

VM

VirtualBox

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

VM

VirtualBox

accessible

data

and

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Oracle

VM

VirtualBox.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H).

unauthorized ability to crash
denial of service
unauthenticated infrastructure logon
dos


Vulnerability

in

the

Oracle

VM

VirtualBox

component

of

Oracle

Virtualization

(subcomponent:

Core).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Oracle

VM

VirtualBox

and

unauthorized

read

access

to

a

subset

of

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H).


Vulnerability

in

the

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Kernel

Zones

Virtualized

NIC

Driver).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Solaris

executes

to

compromise

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Solaris.

CVSS

Base

Score

(Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).


Vulnerability

in

the

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

ZVNET

Driver).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Solaris

executes

to

compromise

Solaris.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Solaris

accessible

data

and

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Solaris.

CVSS

Base

Score

(Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).


Vulnerability

in

the

Oracle

Data

Visualization

Desktop

component

of

Oracle

Fusion

Middleware

(subcomponent:

Security).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

logon

to

the

infrastructure

where

Oracle

Data

Visualization

Desktop

executes

to

compromise

Oracle

Data

Visualization

Desktop.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Data

Visualization

Desktop

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Data

Visualization

Desktop

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Data

Visualization

Desktop

accessible

data

and

unauthorized

ability

to

cause

a

hang

or

frequently

repeatable

crash

(complete

DOS)

of

Oracle

Data

Visualization

Desktop.

Note:

Please

refer

to

Doc

ID

<a

Oracle

Support

Note

for

instructions

on

how

to

address

this

issue.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Performance

Monitor).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Data

Integrator

component

of

Oracle

Fusion

Middleware

(subcomponent:

ODI

Tools).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Data

Integrator.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Data

Integrator

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server

Compiling).

Supported

versions

that

are

affected

are

and

prior

and

prior

and

and

prior.

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Replication).

Supported

versions

that

are

affected

are

and

prior

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

MySQL

Server

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Direct

Banking

product

of

Oracle

Financial

Services

Applications

(component:

Payments).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Direct

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

FLEXCUBE

Direct

Banking

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Tree

Manager).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

While

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Argus

Safety

component

of

Oracle

Health

Sciences

Applications

(subcomponent:

Login).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Argus

Safety.

While

the

vulnerability

is

in

Oracle

Argus

Safety

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Argus

Safety

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Argus

Safety

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Siebel

UI

Framework

component

of

Oracle

Siebel

CRM

(subcomponent:

UIF

Open

UI).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Siebel

UI

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Siebel

UI

Framework

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

Analytics

Actions).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

While

the

vulnerability

is

in

Oracle

Business

Intelligence

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

HCM

Human

Resources

product

of

Oracle

PeopleSoft

(component:

US

Federal

Specific).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

HCM

Human

Resources.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

HCM

Human

Resources

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

ELM

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Enterprise

Learning

Mgmt).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

ELM.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

ELM

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Application

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

PeopleSoft

Enterprise

PeopleTools.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

product

of

Oracle

Retail

Applications

(component:

Segment).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Customer

Management

and

Segmentation

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Web

Services).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Work

in

Process

component

of

Oracle

E-Business

Suite

(subcomponent:

Messages).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Work

in

Process.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Work

in

Process

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Work

in

Process

accessible

data.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L).


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

XML

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

TCP/IP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server

Security

Privileges).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Oracle

Hospitality

Cruise

Dining

Room

Management

product

of

Oracle

Hospitality

Applications

(component:

Web

Service).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Cruise

Dining

Room

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Cruise

Dining

Room

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Dining

Room

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

JD

Edwards

EnterpriseOne

Tools

component

of

Oracle

JD

Edwards

Products

(subcomponent:

Web

Runtime).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

JD

Edwards

EnterpriseOne

Tools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

JD

Edwards

EnterpriseOne

Tools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Enterprise

Manager

for

Exadata

product

of

Oracle

Enterprise

Manager

(component:

Exadata

Plug-In

Deploy

and

Ins).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Enterprise

Manager

for

Exadata.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Enterprise

Manager

for

Exadata.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Demantra

Demand

Management

component

of

Oracle

Supply

Chain

Products

Suite

(subcomponent:

Product

Security).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Demantra

Demand

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Demantra

Demand

Management

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

FLEXCUBE

Investor

Servicing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Deployment).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Core

Components).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

While

the

vulnerability

is

in

Oracle

WebLogic

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N).


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

product

of

Oracle

Construction

and

Engineering

(component:

Web

Access).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Primavera

Enterprise

Project

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Transportation

Management

component

of

Oracle

Supply

Chain

Products

Suite

(subcomponent:

UI

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Transportation

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Transportation

Management

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Pagelet

Wizard).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Financial

Services

Analytical

Applications

Infrastructure

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Financial

Services

Analytical

Applications

Infrastructure.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Financial

Services

Analytical

Applications

Infrastructure

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Financial

Services

Analytical

Applications

Infrastructure

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Data

Integrator

product

of

Oracle

Fusion

Middleware

(component:

Studio).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Data

Integrator.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Data

Integrator

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Application

Server).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

While

the

vulnerability

is

in

PeopleSoft

Enterprise

PT

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N).


Vulnerability

in

the

BI

Publisher

(formerly

XML

Publisher)

product

of

Oracle

Fusion

Middleware

(component:

BI

Publisher

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

BI

Publisher

(formerly

XML

Publisher).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

BI

Publisher

(formerly

XML

Publisher)

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Identity

Manager

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Identity

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Identity

Manager

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Retail

Store

Inventory

Management

product

of

Oracle

Retail

Applications

(component:

Security).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Store

Inventory

Management.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Retail

Store

Inventory

Management.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

VM

VirtualBox

product

of

Oracle

Virtualization

(component:

Core).

Supported

versions

that

are

affected

are

Prior

to

and

prior

to

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

logon

to

the

infrastructure

where

Oracle

VM

VirtualBox

executes

to

compromise

Oracle

VM

VirtualBox.

While

the

vulnerability

is

in

Oracle

VM

VirtualBox

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

VM

VirtualBox

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).


A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.


In all Qualcomm products with Android releases from CAF using the Linux kernel a Sample App failed to check a length potentially leading to unauthorized access to secure memory.


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

unauthorized access
privileged network access compromise


Vulnerability

in

the

BI

Publisher

(formerly

XML

Publisher)

component

of

Oracle

Fusion

Middleware

(subcomponent:

BI

Publisher

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

BI

Publisher

(formerly

XML

Publisher).

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

BI

Publisher

(formerly

XML

Publisher)

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

BI

Publisher

(formerly

XML

Publisher)

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

BI

Publisher

(formerly

XML

Publisher)

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Security).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

PeopleSoft

Enterprise

PeopleTools.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Application

Server).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

General

Ledger

component

of

Oracle

E-Business

Suite

(subcomponent:

Consolidation

Hierarchy

Viewer).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

General

Ledger.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

General

Ledger

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

General

Ledger

accessible

data.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CC

Common

Application

Objects

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Form

and

Approval

Builder).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CC

Common

Application

Objects.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

CC

Common

Application

Objects

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

CC

Common

Application

Objects

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

CC

Common

Application

Objects

accessible

data.

Note:

This

Enterprise

Common

Component

is

used

by

all

PeopleSoft

Application

products.

Please

refer

to

the

<a

Note

Doc

ID

for

patch

information.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Argus

Safety

component

of

Oracle

Health

Sciences

Applications

(subcomponent:

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Argus

Safety.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Argus

Safety

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Integration

Broker).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Banking

Digital

Experience

product

of

Oracle

Financial

Services

Applications

(component:

Loan

Calculator).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Banking

Digital

Experience.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Banking

Digital

Experience

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Banking

Digital

Experience

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Banking

Digital

Experience

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

Analytics

Actions).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Business

Intelligence

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

iSetup

product

of

Oracle

E-Business

Suite

(component:

General

Ledger

Update

Transform

Reports).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSetup.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

iSetup

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSetup

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

Time

and

Labor

product

of

Oracle

E-Business

Suite

(component:

Timecard).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Time

and

Labor.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Time

and

Labor

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Time

and

Labor

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Advanced

Collections

product

of

Oracle

E-Business

Suite

(component:

Admin).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Collections.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Advanced

Collections

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Collections

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

Core

Server

BizLogic

Script

product

of

Oracle

Siebel

CRM

(component:

Integration

Scripting).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Siebel

Core

Server

BizLogic

Script.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Siebel

Core

Server

BizLogic

Script

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

E-Business

Intelligence

product

of

Oracle

E-Business

Suite

(component:

DBI

Setups).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

E-Business

Intelligence.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

E-Business

Intelligence

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

E-Business

Intelligence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

BI

Publisher

product

of

Oracle

Fusion

Middleware

(component:

Web

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

BI

Publisher.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

BI

Publisher

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

BI

Publisher

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

BI

Publisher

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

Payables

product

of

Oracle

E-Business

Suite

(component:

Invoice

Approvals).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Payables.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Payables

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Payables

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

HRMS

(France)

product

of

Oracle

E-Business

Suite

(component:

French

HR).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

HRMS

(France).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

HRMS

(France)

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

HRMS

(France)

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Subledger

Accounting

product

of

Oracle

E-Business

Suite

(component:

Inquiries).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Subledger

Accounting.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Subledger

Accounting

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Subledger

Accounting

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Enterprise

Manager

Base

Platform

product

of

Oracle

Enterprise

Manager

(component:

Policy

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Enterprise

Manager

Base

Platform.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Enterprise

Manager

Base

Platform.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

product

of

Oracle

Commerce

(component:

Tools

and

Frameworks).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Web

Applications

Desktop

Integrator

product

of

Oracle

E-Business

Suite

(component:

Application

Service).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Web

Applications

Desktop

Integrator.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Web

Applications

Desktop

Integrator

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Web

Applications

Desktop

Integrator

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

BI

Publisher

product

of

Oracle

Fusion

Middleware

(component:

Scheduler).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

BI

Publisher.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

BI

Publisher.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CS

Campus

Community

product

of

Oracle

PeopleSoft

(component:

Frameworks).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CS

Campus

Community.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

CS

Campus

Community

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Engineering

product

of

Oracle

E-Business

Suite

(component:

Change

Management).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Engineering.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Engineering

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Engineering

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Transportation

Execution

product

of

Oracle

E-Business

Suite

(component:

Install

and

Upgrade).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Transportation

Execution.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Transportation

Execution

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Transportation

Execution

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Approvals

Management

product

of

Oracle

E-Business

Suite

(component:

AME

Page

rendering).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Approvals

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Approvals

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Approvals

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Reporting

and

Analytics

product

of

Oracle

Food

and

Beverage

Applications

(component:

iCare

Configuration).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Reporting

and

Analytics.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Hospitality

Reporting

and

Analytics

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Reporting

and

Analytics

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

Core

Server

Framework

product

of

Oracle

Siebel

CRM

(component:

Search).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Siebel

Core

Server

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Siebel

Core

Server

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Siebel

Core

Server

Framework

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Siebel

Core

Server

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Depot

Repair

product

of

Oracle

E-Business

Suite

(component:

LOVs).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Depot

Repair.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Depot

Repair

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Depot

Repair

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Purchasing

product

of

Oracle

E-Business

Suite

(component:

Endeca).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Purchasing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Purchasing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Purchasing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupplier

Portal

product

of

Oracle

E-Business

Suite

(component:

Accounts).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupplier

Portal.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

iSupplier

Portal

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupplier

Portal

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Installed

Base

product

of

Oracle

E-Business

Suite

(component:

APIs).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Installed

Base.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Installed

Base

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Installed

Base

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

product

of

Oracle

Commerce

(component:

Tools

and

Frameworks).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Labor

Distribution

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Labor

Distribution.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Labor

Distribution

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Labor

Distribution

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Financial

Services

Revenue

Management

and

Billing

product

of

Oracle

Financial

Services

Applications

(component:

On

Demand

Billing).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Financial

Services

Revenue

Management

and

Billing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Financial

Services

Revenue

Management

and

Billing

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Advanced

Inbound

Telephony

product

of

Oracle

E-Business

Suite

(component:

SDK

client

integration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Inbound

Telephony.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Advanced

Inbound

Telephony

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Inbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Loans

product

of

Oracle

E-Business

Suite

(component:

Loan

Details

Loan

Accounting

Events).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Loans.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Loans

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Loans

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Sourcing

product

of

Oracle

E-Business

Suite

(component:

Intelligence

RFx).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Sourcing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Sourcing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Sourcing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Incentive

Compensation

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Incentive

Compensation.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Incentive

Compensation

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Incentive

Compensation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Human

Resources

product

of

Oracle

E-Business

Suite

(component:

People

Management).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Human

Resources.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Human

Resources

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Human

Resources

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Document

Management

and

Collaboration

product

of

Oracle

E-Business

Suite

(component:

Document

Management).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Document

Management

and

Collaboration.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Document

Management

and

Collaboration

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Document

Management

and

Collaboration

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Applications

Framework

product

of

Oracle

E-Business

Suite

(component:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Applications

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Applications

Framework

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Universal

Work

Queue

product

of

Oracle

E-Business

Suite

(component:

Work

Provider

Site

Level

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Universal

Work

Queue.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Universal

Work

Queue

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Universal

Work

Queue

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

OpenGrok

(component:

Web

App).

Versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTPS

to

compromise

OpenGrok.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

OpenGrok.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Compensation

Workbench

product

of

Oracle

E-Business

Suite

(component:

Compensation

Workbench).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Compensation

Workbench.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Compensation

Workbench

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Compensation

Workbench

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Advanced

Outbound

Telephony

product

of

Oracle

E-Business

Suite

(component:

Region

Mapping).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Outbound

Telephony.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Advanced

Outbound

Telephony

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Outbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Secure

Global

Desktop

product

of

Oracle

Virtualization

(component:

Server).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

Oracle

Secure

Global

Desktop.

While

the

vulnerability

is

in

Oracle

Secure

Global

Desktop

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Secure

Global

Desktop.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Email

Center.

While

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

MES

for

Process

Manufacturing

product

of

Oracle

E-Business

Suite

(component:

Process

Operations).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

MES

for

Process

Manufacturing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

MES

for

Process

Manufacturing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

MES

for

Process

Manufacturing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Legal

Entity

Configurator

product

of

Oracle

E-Business

Suite

(component:

Create

Contracts).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Legal

Entity

Configurator.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Legal

Entity

Configurator

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Legal

Entity

Configurator

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Content

Manager

product

of

Oracle

E-Business

Suite

(component:

Content

Item

Manager).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Content

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Content

Manager

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Content

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CS

Campus

Community

product

of

Oracle

PeopleSoft

(component:

Integration

and

Interfaces).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CS

Campus

Community.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

CS

Campus

Community

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

SCM

eProcurement

product

of

Oracle

PeopleSoft

(component:

Manage

Requisition

Status).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

SCM

eProcurement.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

SCM

eProcurement

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

SCM

eProcurement

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

FIN

Payables

product

of

Oracle

PeopleSoft

(component:

Financial

Sanctions).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

FIN

Payables.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

FIN

Payables

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

BI

Publisher

product

of

Oracle

Fusion

Middleware

(component:

BI

Publisher

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

BI

Publisher.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

BI

Publisher.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Collaborative

Planning

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Collaborative

Planning.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Collaborative

Planning

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Collaborative

Planning

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Project

Contracts

product

of

Oracle

E-Business

Suite

(component:

Hold

Management).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Project

Contracts.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Project

Contracts

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Project

Contracts

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

User

Management

product

of

Oracle

E-Business

Suite

(component:

Proxy

User

Delegation).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

User

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

User

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Financials

Common

Modules

product

of

Oracle

E-Business

Suite

(component:

Advanced

Global

Intercompany).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Financials

Common

Modules.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Financials

Common

Modules

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Financials

Common

Modules

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Public

Sector

Financials

(International)

product

of

Oracle

E-Business

Suite

(component:

Authorization).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Public

Sector

Financials

(International).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Public

Sector

Financials

(International)

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Public

Sector

Financials

(International)

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Common

Applications

Calendar

product

of

Oracle

E-Business

Suite

(component:

Tasks).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Common

Applications

Calendar.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Common

Applications

Calendar

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Common

Applications

Calendar

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Common

Applications

Calendar

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

BI

Publisher

product

of

Oracle

Fusion

Middleware

(component:

E-Business

Suite

XDO).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

BI

Publisher.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

BI

Publisher.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Lease

and

Finance

Management

product

of

Oracle

E-Business

Suite

(component:

Quotes).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Lease

and

Finance

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Lease

and

Finance

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Lease

and

Finance

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Bills

of

Material

product

of

Oracle

E-Business

Suite

(component:

Bill

Issues).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Bills

of

Material.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Bills

of

Material

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Bills

of

Material

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Engineering

product

of

Oracle

E-Business

Suite

(component:

Change

Management).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Engineering.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Engineering

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Engineering

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Trade

Management

product

of

Oracle

E-Business

Suite

(component:

Quotes).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Trade

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Trade

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Trade

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Inventory

Management

product

of

Oracle

Food

and

Beverage

Applications

(component:

Export

to

Reporting

and

Analytics).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Inventory

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Inventory

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Web

Analytics

product

of

Oracle

E-Business

Suite

(component:

Admin).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Web

Analytics.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Web

Analytics

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Web

Analytics

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

JD

Edwards

EnterpriseOne

Tools

product

of

Oracle

JD

Edwards

(component:

Web

Runtime).

Supported

versions

that

are

affected

are

and

Prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

JD

Edwards

EnterpriseOne

Tools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

JD

Edwards

EnterpriseOne

Tools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

JD

Edwards

EnterpriseOne

Tools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

JD

Edwards

EnterpriseOne

Tools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

product

of

Oracle

Financial

Services

Applications

(component:

Loans

And

Deposits).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

product

of

Oracle

Construction

and

Engineering

(component:

Web

Access).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Work

in

Process

product

of

Oracle

E-Business

Suite

(component:

Resource

Exceptions).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Work

in

Process.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Work

in

Process

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Work

in

Process

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Information

Schema).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Customers

Online

product

of

Oracle

E-Business

Suite

(component:

Customer

Tab).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Customers

Online.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Customers

Online

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Customers

Online

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Projects

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Projects.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Projects

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Projects

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

SQR).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Bill

Presentment

Architecture

product

of

Oracle

E-Business

Suite

(component:

Template

Search).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Bill

Presentment

Architecture.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Bill

Presentment

Architecture

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Bill

Presentment

Architecture

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

product

of

Oracle

Commerce

(component:

Tools

and

Frameworks).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Commerce

Guided

Search

Oracle

Commerce

Experience

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Advanced

Pricing

product

of

Oracle

E-Business

Suite

(component:

Price

Book).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Pricing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Advanced

Pricing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Pricing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

Analytics

Web

Dashboards).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Business

Intelligence

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Business

Intelligence

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Business

Intelligence

Enterprise

Edition

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

E-Business

Tax

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

E-Business

Tax.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

E-Business

Tax

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

E-Business

Tax

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Operations

Intelligence

product

of

Oracle

E-Business

Suite

(component:

BIS

Operations

Intelligence).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Operations

Intelligence.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Operations

Intelligence

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Operations

Intelligence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Cash

Management

product

of

Oracle

E-Business

Suite

(component:

Bank

Account

Transfer).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Cash

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Cash

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Cash

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Workflow

product

of

Oracle

E-Business

Suite

(component:

Workflow

Notification

Mailer).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Workflow.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Workflow

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector: