Oracle
Page 76 of 100 — Oracle CVEs from a corpus of 13325, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3198 | Medium | 5.3 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are… |
CVE-2018-3197 | Critical | 9.8 | 2018-10-17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). The supported version that is affected i… |
CVE-2018-3196 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dashboard). Supported versions that are affected are… |
CVE-2018-3195 | Medium | 5.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily expl… |
CVE-2018-3194 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affe… |
CVE-2018-3193 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). Supported versions that are affe… |
CVE-2018-3192 | High | 7.2 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are… |
CVE-2018-3191 | Critical | 9.8 | 2018-10-17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are… |
CVE-2018-3190 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite (subcomponent: Overview Page/Report Rendering). Supported versions tha… |
CVE-2018-3189 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Outcome-Result). Supported versions that are affec… |
CVE-2018-3188 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface). Supported versions that are affected are 12.1.1, 12.1.2… |
CVE-2018-3187 | Medium | 5.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.23 and prior and 8… |
CVE-2018-3186 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easil… |
CVE-2018-3185 | Medium | 5.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |
CVE-2018-3184 | Low | 2.4 | 2018-10-17 | Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: IQR - Foundation Services). The supported version that is affected is 11.1.2.4. E… |
CVE-2018-3183 | Critical | 9.0 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE… |
CVE-2018-3182 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.12 and prior. Easily expl… |
CVE-2018-3181 | Medium | 5.5 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The… |
CVE-2018-3180 | Medium | 5.6 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u2… |
CVE-2018-3179 | High | 7.2 | 2018-10-17 | Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 1… |
CVE-2018-3178 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Ea… |
CVE-2018-3177 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Ea… |
CVE-2018-3176 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Ea… |
CVE-2018-3175 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). The supported version that is affected is 11.1.2.4. Ea… |
CVE-2018-3174 | Medium | 5.3 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41… |
CVE-2018-3173 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |
CVE-2018-3172 | Medium | 5.3 | 2018-10-17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.4. Easily e… |
CVE-2018-3171 | Medium | 5.0 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.23 and prior and 8… |
CVE-2018-3170 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.12 and prior. Easily expl… |
CVE-2018-3169 | High | 8.3 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u… |
CVE-2018-3168 | High | 7.1 | 2018-10-17 | Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware (subcomponent: Core Components). The supported version that is affected is… |
CVE-2018-3167 | Medium | 5.3 | 2018-10-17 | Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitoring). Supported ve… |
CVE-2018-3166 | Medium | 6.5 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-3165 | High | 7.2 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8… |
CVE-2018-3164 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affe… |
CVE-2018-3163 | Medium | 6.5 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-3162 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |
CVE-2018-3161 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.23 and prior and 8… |
CVE-2018-3160 | High | 7.7 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC… |
CVE-2018-3159 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver). The supported… |
CVE-2018-3158 | High | 7.1 | 2018-10-17 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The sup… |
CVE-2018-3157 | Low | 3.7 | 2018-10-17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vul… |
CVE-2018-3156 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior… |
CVE-2018-3155 | High | 7.7 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.1… |
CVE-2018-3154 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are… |
CVE-2018-3153 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are… |
CVE-2018-3152 | High | 7.5 | 2018-10-17 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3… |
CVE-2018-3151 | High | 7.5 | 2018-10-17 | Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). Supported versions that are affected a… |
CVE-2018-3150 | Low | 3.7 | 2018-10-17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit v… |
CVE-2018-3149 | High | 8.3 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u2… |
CVE-2018-3148 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected… |
CVE-2018-3147 | Medium | 4.3 | 2018-10-17 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affec… |
CVE-2018-3146 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6… |
CVE-2018-3145 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily e… |
CVE-2018-3144 | Medium | 5.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.7.23 and prior… |
CVE-2018-3143 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior… |
CVE-2018-3142 | High | 7.7 | 2018-10-17 | Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected… |
CVE-2018-3141 | Medium | 5.8 | 2018-10-17 | Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected… |
CVE-2018-3140 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected… |
CVE-2018-3139 | Low | 3.1 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201… |
CVE-2018-3138 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that… |
CVE-2018-3137 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easil… |
CVE-2018-3136 | Low | 3.4 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7… |
CVE-2018-3135 | Medium | 4.7 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are… |
CVE-2018-3134 | Medium | 5.0 | 2018-10-17 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group Management… |
CVE-2018-3133 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 a… |
CVE-2018-3132 | Medium | 6.1 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are af… |
CVE-2018-3131 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Eas… |
CVE-2018-3130 | Medium | 5.4 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). The supported version th… |
CVE-2018-3129 | Medium | 4.3 | 2018-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are… |
CVE-2018-3128 | High | 8.1 | 2018-10-17 | Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9… |
CVE-2018-3127 | Medium | 4.3 | 2018-10-17 | Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions tha… |
CVE-2018-3126 | Medium | 6.6 | 2018-10-17 | Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xenvironment). Supported versions that are af… |
CVE-2018-3122 | Medium | 6.8 | 2018-10-17 | Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Integrations). Supported versions that are aff… |
CVE-2018-3115 | High | 7.7 | 2018-10-17 | Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affect… |
CVE-2018-3059 | Medium | 6.1 | 2018-10-17 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 18.7, 18.8 and 18… |
CVE-2018-3011 | High | 8.2 | 2018-10-17 | Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1… |
CVE-2018-2971 | Medium | 4.3 | 2018-10-17 | Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are… |
CVE-2018-2922 | Low | 2.5 | 2018-10-17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult t… |
CVE-2018-2914 | High | 7.5 | 2018-10-17 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0… |
CVE-2018-2913 | Critical | 10.0 | 2018-10-17 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager). Supported versions that are affected are 12.1.2.1.0… |
CVE-2018-2912 | High | 7.5 | 2018-10-17 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0… |
CVE-2018-2911 | High | 8.3 | 2018-10-17 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is… |
CVE-2018-2909 | High | 8.6 | 2018-10-17 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. E… |
CVE-2018-2902 | Medium | 4.3 | 2018-10-17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). Supported versions that are affected are 10.3.6.0 an… |
CVE-2018-2889 | High | 7.5 | 2018-10-17 | Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 12… |
CVE-2018-2887 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 13.0.0 and 1… |
CVE-2018-17962 | High | 7.5 | 2018-10-09 | Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used. |
CVE-2018-11797 | Medium | 5.5 | 2018-10-05 | In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page t… |
CVE-2018-11784 | Medium | 4.3 | 2018-10-04 | When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirectin… |
CVE-2018-11763 | Medium | 5.9 | 2018-09-25 | In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any c… |
CVE-2018-11761 | High | 7.5 | 2018-09-19 | In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability… |
CVE-2018-16959 | Medium | 5.3 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community config… |
CVE-2018-16958 | Medium | 5.4 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) w… |
CVE-2018-16957 | Critical | 9.8 | 2018-09-18 | The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI sea… |
CVE-2018-16956 | Medium | 6.5 | 2018-09-18 | The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be… |
CVE-2018-16955 | Medium | 6.1 | 2018-09-18 | The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect param… |
CVE-2018-16954 | Medium | 6.1 | 2018-09-18 | An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an o… |
CVE-2018-16953 | Medium | 6.1 | 2018-09-18 | The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site sc… |
CVE-2018-16952 | High | 8.8 | 2018-09-18 | The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions… |