Vulnerability

in

the

PeopleSoft

Enterprise

HRMS

product

of

Oracle

PeopleSoft

(component:

Candidate

Gateway).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

HRMS.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

HRMS

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

HRMS

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

HRMS

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Core).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

IIOP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

Note:

The

patch

for

this

issue

will

address

the

vulnerability

only

if

the

WLS

instance

is

using

JDK

or

later

or

JDK

or

later.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

WLS

Web

Services).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

IIOP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

HTTP

Server

product

of

Oracle

Fusion

Middleware

(component:

Web

Listener).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

HTTP

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

HTTP

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

HTTP

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

HTTP

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

AutoVue

product

of

Oracle

Supply

Chain

(component:

Security).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

AutoVue.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

AutoVue

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Advanced

Outbound

Telephony

product

of

Oracle

E-Business

Suite

(component:

Calendar).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Outbound

Telephony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Advanced

Outbound

Telephony

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Outbound

Telephony

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Advanced

Outbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

Universal

Work

Queue

product

of

Oracle

E-Business

Suite

(component:

Work

Provider

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Universal

Work

Queue.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Universal

Work

Queue

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Universal

Work

Queue

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Universal

Work

Queue

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Libraries).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Java

SE

Embedded

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

does

not

apply

to

Java

deployments

typically

in

servers

that

load

and

run

only

trusted

code

(e.g.

code

installed

by

an

administrator).

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Enterprise

Manager

Base

Platform

product

of

Oracle

Enterprise

Manager

(component:

Discovery

Framework

(Oracle

OHS)).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Enterprise

Manager

Base

Platform.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Enterprise

Manager

Base

Platform.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Others).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

Analytics

Web

General).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Business

Intelligence

Enterprise

Edition.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Marketing

product

of

Oracle

E-Business

Suite

(component:

Marketing

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Marketing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Marketing

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Marketing

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Marketing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Advanced

Outbound

Telephony

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Outbound

Telephony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Advanced

Outbound

Telephony

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Outbound

Telephony

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Advanced

Outbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Web

Container).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

WebLogic

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N).


Vulnerability

in

the

Oracle

Reports

Developer

product

of

Oracle

Fusion

Middleware

(component:

Security

and

Authentication).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Reports

Developer.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Reports

Developer

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Reports

Developer

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Reports

Developer

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Message

Hooks).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Common

Applications

Calendar

product

of

Oracle

E-Business

Suite

(component:

Notes).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Common

Applications

Calendar.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Common

Applications

Calendar

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Common

Applications

Calendar

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Common

Applications

Calendar

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Identity

Manager

product

of

Oracle

Fusion

Middleware

(component:

OIM

LDAP

user

and

role

Synch).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Identity

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Identity

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebLogic

Server

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iStore

product

of

Oracle

E-Business

Suite

(component:

Shopping

Cart).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

iStore.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iStore

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iStore

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iStore

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Customer

Interaction

History

product

of

Oracle

E-Business

Suite

(component:

Outcome-Result).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Customer

Interaction

History.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Customer

Interaction

History

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Customer

Interaction

History

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Customer

Interaction

History

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Gateway

for

Mobile

Devices

product

of

Oracle

E-Business

Suite

(component:

Setup

of

Mobile

Applications).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Gateway

for

Mobile

Devices.

While

the

vulnerability

is

in

Oracle

CRM

Gateway

for

Mobile

Devices

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Gateway

for

Mobile

Devices

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

E-Business

Intelligence

product

of

Oracle

E-Business

Suite

(component:

DBI

Setups).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

E-Business

Intelligence.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

E-Business

Intelligence

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

E-Business

Intelligence

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

E-Business

Intelligence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Depot

Repair

product

of

Oracle

E-Business

Suite

(component:

Estimate

and

Actual

Charges).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Depot

Repair.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Depot

Repair

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Depot

Repair

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Depot

Repair

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

JSSE).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

Applies

to

client

and

server

deployment

of

Java.

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Field

Service

product

of

Oracle

E-Business

Suite

(component:

Wireless).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Field

Service.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Field

Service

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Field

Service

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Field

Service

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Application

Container

JavaEE).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Profile).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Print

Server).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Client

product

of

Oracle

MySQL

(component:

C

API).

Supported

versions

that

are

affected

are

and

prior

and

prior

and

and

prior.

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Client.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

MySQL

Client

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

product

of

Oracle

Retail

Applications

(component:

Promotions).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Customer

Management

and

Segmentation

Foundation.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Others).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Partner

Management

product

of

Oracle

E-Business

Suite

(component:

Attribute

Admin

Setup).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Partner

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Partner

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Partner

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Partner

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CC

Common

Application

Objects

product

of

Oracle

PeopleSoft

(component:

Approval

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CC

Common

Application

Objects.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

CC

Common

Application

Objects

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

product

of

Oracle

Fusion

Middleware

(component:

Advanced

UI).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebCenter

Sites

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Trade

Management

product

of

Oracle

E-Business

Suite

(component:

Budget).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Trade

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Trade

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Trade

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Trade

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Core).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

IIOP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Workflow

product

of

Oracle

E-Business

Suite

(component:

Workflow

Notification

Mailer).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Workflow.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Workflow

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

PIA

Core

Technology).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iStore

product

of

Oracle

E-Business

Suite

(component:

Shopping

Cart).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iStore.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iStore

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iStore

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Service

Intelligence

product

of

Oracle

E-Business

Suite

(component:

Internal

Operations-

Search).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Service

Intelligence.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Service

Intelligence

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Service

Intelligence

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Service

Intelligence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Core

RDBMS

component

of

Oracle

Database

Server.

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

OracleNet

to

compromise

Core

RDBMS.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Core

RDBMS.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

E-Business

Intelligence

product

of

Oracle

E-Business

Suite

(component:

DBI

Setups).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

E-Business

Intelligence.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

E-Business

Intelligence

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

E-Business

Intelligence

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

E-Business

Intelligence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

JSSE).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Tree

Manager).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Print

Server).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Customer

Interaction

History

product

of

Oracle

E-Business

Suite

(component:

Outcome-Result).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Customer

Interaction

History.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Customer

Interaction

History

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Depot

Repair

product

of

Oracle

E-Business

Suite

(component:

Estimate

and

Actual

Charges).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Depot

Repair.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Depot

Repair

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Depot

Repair

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Depot

Repair

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Process

Scheduler).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Marketing

product

of

Oracle

E-Business

Suite

(component:

Marketing

Administration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Marketing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Marketing

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Marketing

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Marketing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Primavera

Portfolio

Management

product

of

Oracle

Construction

and

Engineering

(component:

Investor

Module).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Portfolio

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Primavera

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Portfolio

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Primavera

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Marketing

product

of

Oracle

E-Business

Suite

(component:

Marketing

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Marketing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Marketing

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Marketing

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Marketing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

product

of

Oracle

Financial

Services

Applications

(component:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Lightweight

HTTP

Server).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

Java

SE

Embedded

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

can

only

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

Untrusted

Java

Web

Start

applications

or

Untrusted

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Knowledge

product

of

Oracle

Knowledge

(component:

Information

Manager

Console).

Supported

versions

that

are

affected

are

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Knowledge

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Knowledge

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

product

of

Oracle

Fusion

Middleware

(component:

Advanced

UI).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

WebCenter

Sites

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Print

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

BI

Platform

Security).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Networking).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Java

SE

Java

SE

Embedded

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Java

SE

Java

SE

Embedded

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Universal

Work

Queue

product

of

Oracle

E-Business

Suite

(component:

Work

Provider

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Universal

Work

Queue.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Universal

Work

Queue

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Universal

Work

Queue

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Universal

Work

Queue

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Outside

In

Technology

product

of

Oracle

Fusion

Middleware

(component:

Outside

In

Filters).

Supported

versions

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Outside

In

Technology.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Outside

In

Technology

accessible

data.

Note:

Outside

In

Technology

is

a

suite

of

software

development

kits

(SDKs).

The

protocol

and

CVSS

score

depend

on

the

software

that

uses

the

Outside

In

Technology

code.

The

CVSS

score

assumes

that

the

software

passes

data

received

over

a

network

directly

to

Outside

In

Technology

code

but

if

data

is

not

received

over

a

network

the

CVSS

score

may

be

lower.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Demantra

Demand

Management

product

of

Oracle

Supply

Chain

(component:

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Demantra

Demand

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Demantra

Demand

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Demantra

Demand

Management

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Others).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Applications

Framework

product

of

Oracle

E-Business

Suite

(component:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Applications

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Applications

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Framework

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Advanced

Outbound

Telephony

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Advanced

Outbound

Telephony.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Advanced

Outbound

Telephony

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Advanced

Outbound

Telephony

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Advanced

Outbound

Telephony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Coherence

product

of

Oracle

Fusion

Middleware

(component:

Caching

CacheStore

Invocation).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Coherence.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Coherence

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Business

Intelligence

Enterprise

Edition

product

of

Oracle

Fusion

Middleware

(component:

Analytics

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Business

Intelligence

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Business

Intelligence

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Business

Intelligence

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Applications

Framework

product

of

Oracle

E-Business

Suite

(component:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Framework.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Framework

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Call

Phone

Number

Page).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Portal).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Common

Applications

Calendar

product

of

Oracle

E-Business

Suite

(component:

Notes).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Common

Applications

Calendar.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Common

Applications

Calendar

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Common

Applications

Calendar

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Common

Applications

Calendar

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Diagnostic

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

Java

SE

Embedded

product

of

Oracle

Java

SE

(component:

Serialization).

Supported

versions

that

are

affected

are

Java

SE:

and

Java

SE

Embedded:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE

Java

SE

Embedded.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Java

SE

Java

SE

Embedded.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Print

Server).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

Applications

Framework

product

of

Oracle

E-Business

Suite

(component:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Applications

Framework.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Framework

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

JD

Edwards

EnterpriseOne

Tools

product

of

Oracle

JD

Edwards

(component:

Monitoring

and

Diagnostics).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

JD

Edwards

EnterpriseOne

Tools.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

JD

Edwards

EnterpriseOne

Tools.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

JSSE).

Supported

versions

that

are

affected

are

Java

SE:

and

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

Applies

to

client

and

server

deployment

of

Java.

This

vulnerability

can

be

exploited

through

sandboxed

Java

Web

Start

applications

and

sandboxed

Java

applets.

It

can

also

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

UI

Framework

product

of

Oracle

Siebel

CRM

(component:

UIF

Open

UI).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Knowledge

Management

product

of

Oracle

E-Business

Suite

(component:

Setup

Admin).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Knowledge

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Knowledge

Management

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Knowledge

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Knowledge

product

of

Oracle

Knowledge

(component:

Information

Manager

Console).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Knowledge.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

JSSE).

Supported

versions

that

are

affected

are

Java

SE:

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Java

SE

accessible

data.

Note:

This

vulnerability

can

only

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

Untrusted

Java

Web

Start

applications

or

Untrusted

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

Advanced

Management

Console).

The

supported

version

that

is

affected

is

Java

Advanced

Management

Console:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Java

SE

accessible

data.

Note:

This

vulnerability

can

only

be

exploited

by

supplying

data

to

APIs

in

the

specified

Component

without

using

Untrusted

Java

Web

Start

applications

or

Untrusted

Java

applets

such

as

through

a

web

service.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Elastic

Search).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Document

Management

and

Collaboration

product

of

Oracle

E-Business

Suite

(component:

Attachments).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Document

Management

and

Collaboration.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Document

Management

and

Collaboration

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Document

Management

and

Collaboration

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Document

Management

and

Collaboration

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

One-to-One

Fulfillment

product

of

Oracle

E-Business

Suite

(component:

Print

Server).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

One-to-One

Fulfillment.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

One-to-One

Fulfillment

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

One-to-One

Fulfillment

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

One-to-One

Fulfillment

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

CRM

Technical

Foundation

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Depot

Repair

product

of

Oracle

E-Business

Suite

(component:

Estimate

and

Actual

Charges).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Depot

Repair.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Depot

Repair

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Depot

Repair

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Depot

Repair

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Customer

Search).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Others).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Java

SE

product

of

Oracle

Java

SE

(component:

JavaFX).

The

supported

version

that

is

affected

is

Java

SE:

Difficult

to

exploit

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Java

SE.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Java

SE

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

(in

Java

SE

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Siebel

UI

Framework

product

of

Oracle

Siebel

CRM

(component:

SWSE

Server).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Siebel

UI

Framework

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Mail).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Quoting

product

of

Oracle

E-Business

Suite

(component:

Courseware).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Quoting.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Quoting

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Quoting

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Quoting

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Elastic

Search).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

WLS

Core

Components).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

IIOP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

WebLogic

Server.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Banking

Payments

product

of

Oracle

Financial

Services

Applications

(component:

Core).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Banking

Payments.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Banking

Payments

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Banking

Payments

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

OPERA

product

of

Oracle

Hospitality

Applications

(component:

Printing).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

OPERA

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Hospitality

OPERA

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

OPERA

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

OPERA

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Web

Applications

Desktop

Integrator

product

of

Oracle

E-Business

Suite

(component:

Application

Service).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Web

Applications

Desktop

Integrator.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Web

Applications

Desktop

Integrator

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Web

Applications

Desktop

Integrator

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Web

Applications

Desktop

Integrator

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Preferences).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Marketing

product

of

Oracle

E-Business

Suite

(component:

Marketing

Administration).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Marketing.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Marketing

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Marketing

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Marketing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Reports

Developer

product

of

Oracle

Fusion

Middleware

(component:

Security

and

Authentication).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Reports

Developer.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Reports

Developer

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Reports

Developer

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Reports

Developer

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Coherence

product

of

Oracle

Fusion

Middleware

(component:

Caching

CacheStore

Invocation).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

to

compromise

Oracle

Coherence.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Coherence.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Retail

Customer

Management

and

Segmentation

Foundation

product

of

Oracle

Retail

Applications

(component:

Promotions).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Customer

Management

and

Segmentation

Foundation.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Retail

Customer

Management

and

Segmentation

Foundation.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Siebel

UI

Framework

product

of

Oracle

Siebel

CRM

(component:

EAI).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Siebel

UI

Framework.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Siebel

UI

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Knowledge

product

of

Oracle

Knowledge

(component:

Web

Applications

InfoCenter).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Knowledge.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Knowledge.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

product

of

Oracle

E-Business

Suite

(component:

Admin).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupport.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

iSupport

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iSupport

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

GraalVM

Enterprise

Edition

product

of

Oracle

GraalVM

(component:

GraalVM

Compiler).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

multiple

protocols

to

compromise

Oracle

GraalVM

Enterprise

Edition.

While

the

vulnerability

is

in

Oracle

GraalVM

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

GraalVM

Enterprise

Edition

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Email

Center

product

of

Oracle

E-Business

Suite

(component:

Message

Display).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

unauthenticated

attacker

with

network

access

via

HTTPS

to

compromise

Oracle

Email

Center.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Email

Center

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Email

Center

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Email

Center

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector: