2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3357 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3357

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3354 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3354

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3353 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3353

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3352 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3352

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3351 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3351

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3350 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3350

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3349 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3349

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3348 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3348

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3346 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3346

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3344 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3344

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3343 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3343

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3341 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3341

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3340 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3340

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3339 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3339

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3338 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3338

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3336 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3336

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3335 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3335

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3334 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3334

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3333 — Oracle Marketing: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3333

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3332 — Oracle Vm_virtualbox: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3332

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional produc CVSSv3.1 8.4 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3328 — Oracle Common_applications: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3328

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle C CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3327 — Oracle Common_applications: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3327

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle C CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3326 — Oracle Common_applications: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3326

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commo CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3325 — Oracle Siebel_ui_framework: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3325

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3324 — Oracle Primavera_p6_enterprise_project_portfolio_management: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3324

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, atta CVSSv3.1 10.0 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
10.0
CVSS v3.1
100
Edit Score