Browse CVEs

MEDIUM 6.5 CVE-2018-3137 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and pr… MySQL after 8.0.12 Fix from $1,6002018-10-17 MEDIUM 6.5 CVE-2018-3143 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23… MySQL 10.0.37 / 10.1.37+ Fix from $1,6002018-10-17 MEDIUM 6.1 CVE-2018-3140 Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is… Hyperion Patch available Fix from $1,6002018-10-17 MEDIUM 5.8 CVE-2018-3141 Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is… Hyperion Patch available Fix from $1,6002018-10-17 MEDIUM 5.0 CVE-2018-3134 Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group … Agile Product Lifecycle Management For Process Patch available Fix from $1,6002018-10-17 HIGH 8.2 CVE-2018-3011 Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affecte… Trade Management Patch available Fix from $1,9502018-10-17 HIGH 8.1 CVE-2018-3128 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is aff… Hospitality Reporting And Analytics Patch available Fix from $1,9502018-10-17 HIGH 7.7 CVE-2018-3115 Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that … Retail Sales Audit Patch available Fix from $1,9502018-10-17 MEDIUM 6.8 CVE-2018-3122 Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Integrations). Supported versions th… Retail Open Commerce Platform Patch available Fix from $1,6002018-10-17 MEDIUM 6.6 CVE-2018-3126 Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xenvironment). Supported versions t… Retail Xstore Point Of Service Patch available Fix from $1,6002018-10-17 MEDIUM 6.1 CVE-2018-3059 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 18.7, 1… Siebel Ui Framework Patch available Fix from $1,6002018-10-17 MEDIUM 6.1 CVE-2018-3131 Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected i… Hospitality Gift And Loyalty Patch available Fix from $1,6002018-10-17 MEDIUM 6.1 CVE-2018-3132 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions t… Peoplesoft Enterprise Peopletools Patch available Fix from $1,6002018-10-17 MEDIUM 5.4 CVE-2018-3130 Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). The supported … Peoplesoft Enterprise Interaction Hub Patch available Fix from $1,6002018-10-17 CRITICAL 10.0 CVE-2018-2913 Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager). Supported versions that are affected are 12… Goldengate Patch available Fix from $2,3002018-10-17 HIGH 8.6 CVE-2018-2909 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to… Vm Virtualbox 5.2.20+ Fix from $1,9502018-10-17 HIGH 8.3 CVE-2018-2911 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is a… Glassfish Server Patch available Fix from $1,9502018-10-17 HIGH 7.5 CVE-2018-2889 Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affec… Micros Retail J Patch available Fix from $1,9502018-10-17 HIGH 7.5 CVE-2018-2912 Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 1… Goldengate Patch available Fix from $1,9502018-10-17 HIGH 7.5 CVE-2018-2914 Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 1… Goldengate Patch available Fix from $1,9502018-10-17 MEDIUM 6.5 CVE-2018-2887 Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13… Micros Retail J Patch available Fix from $1,6002018-10-17 MEDIUM 5.4 CVE-2018-16958 An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Servic… Webcenter Interaction Mitigation only Fix from $1,6002018-09-18 MEDIUM 5.3 CVE-2018-16959 An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile commun… Webcenter Interaction Mitigation only Fix from $1,6002018-09-18 CRITICAL 9.8 CVE-2018-16957 The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Orac… Webcenter Interaction Mitigation only Fix from $2,3002018-09-18 HIGH 8.8 CVE-2018-16952 The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitiv… Webcenter Interaction Mitigation only Fix from $1,9502018-09-18 MEDIUM 6.5 CVE-2018-16956 The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pa… Webcenter Interaction Mitigation only Fix from $1,6002018-09-18 MEDIUM 6.1 CVE-2018-16953 The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cro… Webcenter Interaction Mitigation only Fix from $1,6002018-09-18 MEDIUM 6.1 CVE-2018-16954 An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also c… Webcenter Interaction Patch available Fix from $1,6002018-09-18 MEDIUM 6.1 CVE-2018-16955 The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redi… Webcenter Interaction Mitigation only Fix from $1,6002018-09-18 CRITICAL 9.9 CVE-2018-3110 A vulnerability was discovered in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.… Database Server Patch available Fix from $2,3002018-08-10