Vuldb Updates

A vulnerability categorized as critical has been discovered in Oracle Banking Platform 2.5.0/2.6.0/2.6.1/2.6.2. This affects an unknown function of the component Jasper Project. The manipulation results in deserialization. This vulnerability is reported as CVE-2018-14718. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Oracle Financial Services Analytical Applications Infrastructure up to 8.0.7. This impacts an unknown function of the component Jasper Project. This manipulation causes deserialization. This vulnerability appears as CVE-2018-14718. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability marked as critical has been reported in Oracle WebCenter Portal 12.2.1.3.0. This vulnerability affects unknown code of the component AntiSamy. The manipulation leads to deserialization. This vulnerability is traded as CVE-2018-14718. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle JDeveloper 12.1.3.0.0/12.2.1.3.0. This affects an unknown function of the component jackson-databind. This manipulation causes deserialization. This vulnerability appears as CVE-2018-14718. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Oracle Retail Merchandising System 15.0/16.0. The affected element is an unknown function of the component Documentation. The manipulation results in deserialization. This vulnerability is reported as CVE-2018-14718. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability described as critical has been identified in CPU. The impacted element is an unknown function of the component Multi-Threading. The manipulation as part of Timing results in information disclosure. This vulnerability is identified as CVE-2018-5407. The attack is only possible with local access. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Oracle MySQL Server up to 5.6.42/5.7.24/8.0.13. It has been classified as problematic. The impacted element is an unknown function of the component Packaging. This manipulation causes key management error. This vulnerability is handled as CVE-2018-0734. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability has been found in Oracle VM VirtualBox up to 5.2.25 and classified as problematic. This issue affects some unknown processing of the component OpenSSL. This manipulation causes key management error. This vulnerability is tracked as CVE-2018-0734. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Oracle Primavera P6 Enterprise Project Portfolio Management up to 18.8. This affects an unknown part of the component OpenSSL. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2018-0734. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Oracle Application Server 0.9.8/1.0.0/1.0.1 and classified as critical. Affected is an unknown function of the component Technology Stack Triage. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2018-0734. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Oracle Enterprise Manager Base Platform 12.1.0.5.0/13.2.0.0.0/13.3.0.0.0. It has been rated as critical. Impacted is an unknown function of the component Discovery Framework. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2018-0734. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in Oracle Enterprise Manager Ops Center 12.3.3. The affected element is an unknown function of the component Networking. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2018-0734. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Oracle API Gateway 11.1.2.4.0. This affects an unknown function of the component OpenSSL. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2018-0734. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Oracle Tuxedo 12.1.1.0.0. This impacts an unknown function of the component OpenSSL. The manipulation results in information disclosure. This vulnerability is identified as CVE-2018-0734. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in Oracle MySQL Enterprise Backup up to 3.12.3/4.1.2. Impacted is an unknown function of the component Enterprise Backup. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2018-0734. It is possible to launch the attack on the local host. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56/8.57. This issue affects some unknown processing of the component OpenSSL. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2018-0734. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Oracle Endeca Server 7.7.0. Impacted is an unknown function of the component TFA Collector. Executing a manipulation can lead to key management error. This vulnerability is tracked as CVE-2018-0734. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Oracle Enterprise Communications Broker PCz3.0/PCz3.1/PCz3.2. This affects an unknown function of the component Security. This manipulation causes key management error. This vulnerability is tracked as CVE-2018-0734. The attack is restricted to local execution. No exploit exists. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Oracle Enterprise Session Border Controller 7.5/8.0/8.1/8.2/8.3. This impacts an unknown function of the component Security. Such manipulation leads to key management error. This vulnerability is listed as CVE-2018-0734. The attack must be carried out locally. There is no available exploit. The affected component should be upgraded.

A vulnerability described as very critical has been identified in Microsoft Azure App Service. The impacted element is an unknown function. The manipulation results in missing authentication. This vulnerability is identified as CVE-2026-77900. The attack can be executed remotely. There is not any exploit available. This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.