Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Server:

Audit

Plug-in).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iStore

product

of

Oracle

E-Business

Suite

(component:

Shopping

Cart).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iStore.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

iStore

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

iStore

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

unauthorized access
privileged network access compromise


Vulnerability

in

the

Identity

Manager

product

of

Oracle

Fusion

Middleware

(component:

Identity

Console).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Identity

Manager.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Identity

Manager

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Identity

Manager

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Identity

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

Application

Object

Library

product

of

Oracle

E-Business

Suite

(component:

Profiles).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Application

Object

Library.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Application

Object

Library

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Application

Object

Library

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Site

Hub

product

of

Oracle

E-Business

Suite

(component:

Sites).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Site

Hub.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Site

Hub

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Site

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Payables

product

of

Oracle

E-Business

Suite

(component:

India

Localization

Results).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Payables.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Payables

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Payables

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Quoting

product

of

Oracle

E-Business

Suite

(component:

Courseware).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Quoting.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Quoting

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Quoting

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Receivables

product

of

Oracle

E-Business

Suite

(component:

Receipts).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Receivables.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Receivables

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Receivables

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Argus

Safety

product

of

Oracle

Health

Sciences

Applications

(component:

Letters).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Argus

Safety.

While

the

vulnerability

is

in

Oracle

Argus

Safety

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Argus

Safety

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

E-Records

product

of

Oracle

E-Business

Suite

(component:

E-signatures).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

E-Records.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

E-Records

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

E-Records

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Service

Contracts

product

of

Oracle

E-Business

Suite

(component:

Authoring).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Service

Contracts.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Service

Contracts

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Service

Contracts

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Concurrent

Processing

product

of

Oracle

E-Business

Suite

(component:

BI

Publisher

Integration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Concurrent

Processing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Concurrent

Processing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Concurrent

Processing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

General

Ledger

product

of

Oracle

E-Business

Suite

(component:

Account

Hierarchy

Manager).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

General

Ledger.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

General

Ledger

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

General

Ledger

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Field

Service

product

of

Oracle

E-Business

Suite

(component:

Wireless).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Field

Service.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Field

Service

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Field

Service

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

CRM

Technical

Foundation

product

of

Oracle

E-Business

Suite

(component:

Data

Source).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

CRM

Technical

Foundation.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

CRM

Technical

Foundation

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

CRM

Technical

Foundation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Human

Resources

product

of

Oracle

E-Business

Suite

(component:

iRecruitment).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Human

Resources.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Human

Resources

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Human

Resources

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Product

Hub

product

of

Oracle

E-Business

Suite

(component:

Template

GTIN

search).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Product

Hub.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Product

Hub

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Product

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Landed

Cost

Management

product

of

Oracle

E-Business

Suite

(component:

Shipment

Workbench).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Landed

Cost

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Landed

Cost

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Landed

Cost

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

product

of

Oracle

Construction

and

Engineering

(component:

Web

Access).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

While

the

vulnerability

is

in

Primavera

Enterprise

Project

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Enterprise

Asset

Management

product

of

Oracle

E-Business

Suite

(component:

Setup).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Enterprise

Asset

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Enterprise

Asset

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Enterprise

Asset

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Reporting

and

Analytics

product

of

Oracle

Food

and

Beverage

Applications

(component:

Report).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Reporting

and

Analytics.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Hospitality

Reporting

and

Analytics

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

Reporting

and

Analytics

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebLogic

Server

product

of

Oracle

Fusion

Middleware

(component:

Web

Services).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).


Vulnerability

in

the

Java

SE

Oracle

GraalVM

Enterprise

Edition

product

of

Oracle

Java

SE

(component:

Libraries).

Supported

versions

that

are

affected

are

Java

SE:

Oracle

GraalVM

Enterprise

Edition:

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

Kerberos

to

compromise

Java

SE

Oracle

GraalVM

Enterprise

Edition.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Java

SE

Oracle

GraalVM

Enterprise

Edition

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Java

SE

Oracle

GraalVM

Enterprise

Edition

accessible

data.

Note:

This

vulnerability

applies

to

Java

deployments

typically

in

clients

running

sandboxed

Java

Web

Start

applications

or

sandboxed

Java

applets

that

load

and

run

untrusted

code

(e.g.

code

that

comes

from

the

internet)

and

rely

on

the

Java

sandbox

for

security.

This

vulnerability

can

also

be

exploited

by

using

APIs

in

the

specified

Component

e.g.

through

a

web

service

which

supplies

data

to

the

APIs.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Shipping

Execution

product

of

Oracle

E-Business

Suite

(component:

Workflow

Events).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Shipping

Execution.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Shipping

Execution

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Shipping

Execution

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Applications

Manager

product

of

Oracle

E-Business

Suite

(component:

Diagnostics).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Manager.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Applications

Manager

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Applications

Manager

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Universal

Work

Queue

product

of

Oracle

E-Business

Suite

(component:

Work

Provider

Site

Level

Administration).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Universal

Work

Queue.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Universal

Work

Queue

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Universal

Work

Queue

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CS

Student

Records

product

of

Oracle

PeopleSoft

(component:

Class

Search).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CS

Student

Records.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

CS

Student

Records

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

CS

Student

Records

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

CS

Student

Records

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Transportation

Management

product

of

Oracle

Supply

Chain

(component:

UI

Infrastructure).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Transportation

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Transportation

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Transportation

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Essbase

Administration

Services

product

of

Oracle

Essbase

(component:

EAS

Console).

The

supported

versions

that

are

affected

are

Prior

to

and

Prior

to

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Essbase

Administration

Services.

While

the

vulnerability

is

in

Essbase

Administration

Services

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Essbase

Administration

Services

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Essbase

Administration

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

CC

Common

Application

Objects

product

of

Oracle

PeopleSoft

(component:

Activity

Guide

Composer).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CC

Common

Application

Objects.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

PeopleSoft

Enterprise

CC

Common

Application

Objects

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

CC

Common

Application

Objects

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Essbase

Administration

Services

product

of

Oracle

Essbase

(component:

EAS

Console).

The

supported

version

that

is

affected

is

Prior

to

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Essbase

Administration

Services.

While

the

vulnerability

is

in

Oracle

Essbase

Administration

Services

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Essbase

Administration

Services.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Essbase

Administration

Services

product

of

Oracle

Essbase

(component:

EAS

Console).

The

supported

versions

that

are

affected

are

Prior

to

and

Prior

to

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Essbase

Administration

Services.

While

the

vulnerability

is

in

Essbase

Administration

Services

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Essbase

Administration

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Incentive

Compensation

product

of

Oracle

E-Business

Suite

(component:

User

Interface).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Incentive

Compensation.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Incentive

Compensation

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Incentive

Compensation

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Mobile

Field

Service

product

of

Oracle

E-Business

Suite

(component:

Admin

UI).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Mobile

Field

Service.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Mobile

Field

Service

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Mobile

Field

Service

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

SCM

product

of

Oracle

PeopleSoft

(component:

Supplier

Portal).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

SCM.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

SCM

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

SCM

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

SCM

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

CS

Academic

Advisement

product

of

Oracle

PeopleSoft

(component:

Advising

Notes).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CS

Academic

Advisement.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

CS

Academic

Advisement

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

CS

Academic

Advisement

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

SQR).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Deal

Management

product

of

Oracle

E-Business

Suite

(component:

Miscellaneous).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Deal

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Deal

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Deal

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Financial

Services

Analytical

Applications

Infrastructure

product

of

Oracle

Financial

Services

Applications

(component:

Unified

Metadata

Manager).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Financial

Services

Analytical

Applications

Infrastructure.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Financial

Services

Analytical

Applications

Infrastructure

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

Configurator

product

of

Oracle

E-Business

Suite

(component:

UI

Servlet).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Configurator.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Configurator

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Configurator

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Communications

Operations

Monitor

product

of

Oracle

Communications

(component:

Mediation

Engine).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Communications

Operations

Monitor.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Communications

Operations

Monitor

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Communications

Operations

Monitor

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Communications

Operations

Monitor

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

product

of

Oracle

PeopleSoft

(component:

My

Links).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products

(scope

change).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Sourcing

product

of

Oracle

E-Business

Suite

(component:

Intelligence

RFx

Creation).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Sourcing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Sourcing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Sourcing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

product

of

Oracle

MySQL

(component:

Server:

Security:

Privileges).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Communications

Billing

and

Revenue

Management

product

of

Oracle

Communications

Applications

(component:

Connection

Manager).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

TCP

to

compromise

Oracle

Communications

Billing

and

Revenue

Management.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Communications

Billing

and

Revenue

Management.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Enterprise

Session

Border

Controller

product

of

Oracle

Communications

(component:

WebUI).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Enterprise

Session

Border

Controller.

While

the

vulnerability

is

in

Oracle

Enterprise

Session

Border

Controller

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Enterprise

Session

Border

Controller

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).


Vulnerability

in

the

Oracle

Communications

Convergence

product

of

Oracle

Communications

Applications

(component:

General

Framework).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Communications

Convergence.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Communications

Convergence

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Communications

Convergence

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

FIN

Cash

Management

product

of

Oracle

PeopleSoft

(component:

Financial

Gateway).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

FIN

Cash

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

FIN

Cash

Management

attacks

may

significantly

impact

additional

products

(scope

change).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

FIN

Cash

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

FIN

Cash

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Enterprise

Manager

Base

Platform

product

of

Oracle

Enterprise

Manager

(component:

Policy

Framework).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Enterprise

Manager

Base

Platform.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Enterprise

Manager

Base

Platform

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Enterprise

Manager

Base

Platform

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Trade

Management

product

of

Oracle

E-Business

Suite

(component:

GL

Accounts).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Trade

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Trade

Management

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Trade

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

CS

Academic

Advisement

product

of

Oracle

PeopleSoft

(component:

Advising

Notes).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

CS

Academic

Advisement.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

CS

Academic

Advisement

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Primavera

Portfolio

Management

product

of

Oracle

Construction

and

Engineering

(component:

Web

Access).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Portfolio

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Primavera

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Portfolio

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Primavera

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Project

Costing

product

of

Oracle

E-Business

Suite

(component:

Expenses

Currency

Override).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Project

Costing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

Project

Costing

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Project

Costing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Communications

Billing

and

Revenue

Management

product

of

Oracle

Communications

Applications

(component:

Connection

Manager).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Communications

Billing

and

Revenue

Management.

While

the

vulnerability

is

in

Oracle

Communications

Billing

and

Revenue

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Communications

Billing

and

Revenue

Management.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Agile

PLM

product

of

Oracle

Supply

Chain

(component:

Attachments).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Agile

PLM.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Agile

PLM

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Communications

Billing

and

Revenue

Management

product

of

Oracle

Communications

Applications

(component:

Connection

Manager).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

TCP

to

compromise

Oracle

Communications

Billing

and

Revenue

Management.

While

the

vulnerability

is

in

Oracle

Communications

Billing

and

Revenue

Management

attacks

may

significantly

impact

additional

products

(scope

change).

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Communications

Billing

and

Revenue

Management.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

Enterprise

Session

Border

Controller

product

of

Oracle

Communications

(component:

WebUI).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Enterprise

Session

Border

Controller.

While

the

vulnerability

is

in

Oracle

Enterprise

Session

Border

Controller

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Enterprise

Session

Border

Controller

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Enterprise

Session

Border

Controller

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Applications

Framework

product

of

Oracle

E-Business

Suite

(component:

Attachments

File

Upload).

Supported

versions

that

are

affected

are

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Applications

Framework.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Applications

Framework

attacks

may

significantly

impact

additional

products

(scope

change).

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Applications

Framework

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Applications

Framework

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

product

of

Oracle

PeopleSoft

(component:

Security).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Catalog

Mover).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

PeopleSoft

Enterprise

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Security).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PeopleTools.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

component

of

Oracle

Primavera

Products

Suite

(subcomponent:

Web

Access

(Apache

Commons

BeanUtils)).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

While

the

vulnerability

is

in

Primavera

Enterprise

Project

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Primavera

Enterprise

Project

Portfolio

Management.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

FLEXCUBE

Universal

Banking

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

DDL).

Supported

versions

that

are

affected

are

and

earlier

and

earlier

and

and

earlier.

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Private

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

OPERA

Property

Services

component

of

Oracle

Hospitality

Applications

(subcomponent:

OPERA

Business

Events).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

OPERA

Property

Services.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

OPERA

Property

Services

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

OPERA

Property

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

OPERA

Property

Services

component

of

Oracle

Hospitality

Applications

(subcomponent:

OPERA

License

code

configuration).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

OPERA

Property

Services.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

OPERA

Property

Services

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

OPERA

Property

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Portfolio

Management).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

FLEXCUBE

Private

Banking

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

DDL).

Supported

versions

that

are

affected

are

and

earlier

and

earlier

and

and

earlier.

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Unit

Trust).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Private

Banking

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Connectors

component

of

Oracle

MySQL

(subcomponent:

Connector/J).

Supported

versions

that

are

affected

are

and

earlier.

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Connectors.

While

the

vulnerability

is

in

MySQL

Connectors

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

MySQL

Connectors.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability in the Java SE Java SE Embedded JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE Java SE Embedded JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE Java SE Embedded JRockit attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all Java SE Java SE Embedded JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts).


Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2 8.3 8.4 15.1 15.2 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS v3.0 Base Score 8.1 (Confidentiality and Integrity impacts).


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 5.7 (Confidentiality impacts).


Vulnerability

in

the

Oracle

Hospitality

OPERA

Property

Services

component

of

Oracle

Hospitality

Applications

(subcomponent:

OXI

Interface).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

OPERA

Property

Services.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

OPERA

Property

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Security:

Encryption).

Supported

versions

that

are

affected

are

and

earlier.

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

WebCenter

Sites

accessible

data

as

well

as

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability in the PeopleSoft Enterprise HCM ePerformance component of Oracle PeopleSoft Products (subcomponent: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM ePerformance. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise HCM ePerformance accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Client

mysqldump).

Supported

versions

that

are

affected

are

and

earlier

and

earlier

and

and

earlier.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Solaris

component

of

Oracle

Sun

Systems

Products

Suite

(subcomponent:

Kernel

Zones

virtualized

NIC

driver).

The

supported

version

that

is

affected

is

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

Solaris.

While

the

vulnerability

is

in

Solaris

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Solaris

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Limits

and

Collateral).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Unit

Trust).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Private

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).


Vulnerability

in

the

Oracle

Retail

Open

Commerce

Platform

component

of

Oracle

Retail

Applications

(subcomponent:

Web).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Retail

Open

Commerce

Platform.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

Retail

Open

Commerce

Platform

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Retail

Open

Commerce

Platform

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Retail

Open

Commerce

Platform

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Security

Management

System).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Identity

Manager

component

of

Oracle

Fusion

Middleware

(subcomponent:

Rules

Engine).

The

supported

version

that

is

affected

is

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Identity

Manager.

While

the

vulnerability

is

in

Oracle

Identity

Manager

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Identity

Manager.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).


Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel UI Framework accessible data as well as unauthorized update insert or delete access to some of Siebel UI Framework accessible data. CVSS v3.0 Base Score 7.6 (Confidentiality and Integrity impacts).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

DDL).

Supported

versions

that

are

affected

are

and

earlier

and

earlier

and

and

earlier.

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Security:

Privileges).

Supported

versions

that

are

affected

are

and

earlier.

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Limits

and

Collateral).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Investor

Servicing

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Unit

Trust).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Investor

Servicing.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

creation

deletion

or

modification

access

to

critical

data

or

all

Oracle

FLEXCUBE

Investor

Servicing

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).


Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Siebel UI Framework accessible data. CVSS v3.0 Base Score 3.1 (Integrity impacts).


Vulnerability

in

the

Oracle

Hospitality

OPERA

Property

Services

component

of

Oracle

Hospitality

Applications

(subcomponent:

OPERA

Room

Image/Picture

Setup).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

OPERA

Property

Services.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

OPERA

Property

Services

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Security:

Privileges).

Supported

versions

that

are

affected

are

and

earlier.

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

WebCenter

Sites

component

of

Oracle

Fusion

Middleware

(subcomponent:

Advanced

UI).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebCenter

Sites.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

WebCenter

Sites

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).


Vulnerability

in

the

MySQL

Connectors

component

of

Oracle

MySQL

(subcomponent:

Connector/J).

Supported

versions

that

are

affected

are

and

earlier.

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Connectors.

While

the

vulnerability

is

in

MySQL

Connectors

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Connectors

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

MySQL

Connectors

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Limits

and

Collateral).

Supported

versions

that

are

affected

are

and

Easily

\exploitable\

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Enterprise

Limits

and

Collateral

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

component

of

Oracle

Hospitality

Applications

(subcomponent:

Module).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Cruise

Shipboard

Property

Management

System

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

FLEXCUBE

Universal

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Infrastructure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Universal

Banking.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Oracle

FLEXCUBE

Universal

Banking

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

FLEXCUBE

Universal

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

component

of

Oracle

Primavera

Products

Suite

(subcomponent:

Web

Access).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

iSupport

component

of

Oracle

E-Business

Suite

(subcomponent:

Profiles).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

iSupport.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

iSupport

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Cruise

Dining

Room

Management

component

of

Oracle

Hospitality

Applications

(subcomponent:

SilverWhere).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Cruise

Dining

Room

Management.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Cruise

Dining

Room

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Cruise

Dining

Room

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PT

PeopleTools

component

of

Oracle

PeopleSoft

Products

(subcomponent:

PeopleSoft

CDA).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PT

PeopleTools.

While

the

vulnerability

is

in

PeopleSoft

Enterprise

PT

PeopleTools

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PT

PeopleTools

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Reporting

and

Analytics

component

of

Oracle

Hospitality

Applications

(subcomponent:

iQuery).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Reporting

and

Analytics.

While

the

vulnerability

is

in

Oracle

Hospitality

Reporting

and

Analytics

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Hospitality

Reporting

and

Analytics.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Client

programs).

Supported

versions

that

are

affected

are

and

earlier

and

earlier

and

and

earlier.

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Primavera

Enterprise

Project

Portfolio

Management

component

of

Oracle

Primavera

Products

Suite

(subcomponent:

Web

Access).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Enterprise

Project

Portfolio

Management.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

Primavera

Enterprise

Project

Portfolio

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Primavera

Enterprise

Project

Portfolio

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Simphony

component

of

Oracle

Hospitality

Applications

(subcomponent:

Enterprise

Management

Console).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Simphony.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Simphony

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

Leisure).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Guest

Access

component

of

Oracle

Hospitality

Applications

(subcomponent:

Base).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Guest

Access.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Guest

Access

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Guest

Access

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

Virtual

Directory

component

of

Oracle

Fusion

Middleware

(subcomponent:

Virtual

Directory

Server).

Supported

versions

that

are

affected

are

and

Difficult

to

exploit

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Virtual

Directory.

Successful

attacks

of

this

vulnerability

can

result

in

takeover

of

Oracle

Virtual

Directory.

CVSS

Base

Score

(Confidentiality

Integrity

and

Availability

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).


Vulnerability

in

the

Oracle

FLEXCUBE

Private

Banking

component

of

Oracle

Financial

Services

Applications

(subcomponent:

Miscellaneous).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

FLEXCUBE

Private

Banking.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

FLEXCUBE

Private

Banking

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Simphony

component

of

Oracle

Hospitality

Applications

(subcomponent:

Service

Host).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Simphony.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Simphony

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Simphony

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

Hotel

Mobile

component

of

Oracle

Hospitality

Applications

(subcomponent:

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Hospitality

Hotel

Mobile.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hospitality

Hotel

Mobile

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

Hyperion

Financial

Reporting

component

of

Oracle

Hyperion

(subcomponent:

Workspace).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hyperion

Financial

Reporting.

While

the

vulnerability

is

in

Oracle

Hyperion

Financial

Reporting

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hyperion

Financial

Reporting

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hyperion

Financial

Reporting

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Primavera

Unifier

component

of

Oracle

Primavera

Products

Suite

(subcomponent:

Platform).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Primavera

Unifier.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Primavera

Unifier

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

Inventory

Management

component

of

Oracle

Hospitality

Applications

(subcomponent:

Inventory

and

Count

Cycle).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Inventory

Management.

While

the

vulnerability

is

in

Oracle

Hospitality

Inventory

Management

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

Hospitality

Inventory

Management

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

Inventory

Management

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

FSCM

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Strategic

Sourcing).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

FSCM.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

FSCM

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

WebConnect).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

Oracle

Hospitality

component

of

Oracle

Hospitality

Applications

(subcomponent:

Other).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

SMTP

to

compromise

Oracle

Hospitality

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

Hospitality

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

FSCM

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Staffing

Front

Office).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

FSCM.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

FSCM

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:


Vulnerability

in

the

PeopleSoft

Enterprise

PRTL

Interaction

Hub

component

of

Oracle

PeopleSoft

Products

(subcomponent:

Discussion

Forum).

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

PeopleSoft

Enterprise

PRTL

Interaction

Hub.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker

and

while

the

vulnerability

is

in

PeopleSoft

Enterprise

PRTL

Interaction

Hub

attacks

may

significantly

impact

additional

products.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

PeopleSoft

Enterprise

PRTL

Interaction

Hub

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:


Vulnerability

in

the

Hospitality

Hotel

Mobile

component

of

Oracle

Hospitality

Applications

(subcomponent:

The

supported

version

that

is

affected

is

Easily

exploitable

vulnerability

allows

low

privileged

attacker

with

network

access

via

HTTP

to

compromise

Hospitality

Hotel

Mobile.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

Hospitality

Hotel

Mobile

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector: