Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

BID:99579

Info

Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

Bugtraq ID: 99579
Class: Unknown
CVE:
Remote: Yes
Local: Yes
Published: Jul 14 2017 12:00AM
Updated: Jul 14 2017 12:00AM
Credit: Oracle
Vulnerable: Oracle Weblogic Server 10.3.6 0
Oracle Weblogic Server 12.2.1.2
Oracle Weblogic Server 12.2.1.1
Oracle Weblogic Server 12.1.3.0
Oracle WebCenter Content 12.2.1.2.1
Oracle WebCenter Content 12.2.1.1.1
Oracle WebCenter Content 11.1.1.9
Oracle WebCenter Content 11.1.1.7
Oracle VM VirtualBox 5.1.20
Oracle VM VirtualBox 5.1.16
Oracle VM VirtualBox 5.1.14
Oracle VM VirtualBox 5.1.10
Oracle VM VirtualBox 5.1.8
Oracle Tuxedo System and Applications Monitor 12.2.2.0.0
Oracle Tuxedo System and Applications Monitor 12.1.3.0.0
Oracle Tuxedo System and Applications Monitor 12.1.1.1.0
Oracle Tuxedo System and Applications Monitor 11.1.1.2.2
Oracle Tuxedo System and Applications Monitor 11.1.1.2.1
Oracle Tuxedo System and Applications Monitor 11.1.1.2.0
Oracle Tuxedo 12.1.1.0
Oracle Transportation Management 6.3.6.1
Oracle Transportation Management 6.3.5.1
Oracle Transportation Management 6.3.4.1
Oracle Transportation Management 6.2
Oracle Transportation Management 6.1
Oracle Traffic Director 11.1.1 7.0
Oracle Traffic Director 11.1.1.9.0
Oracle Sun ZFS Storage Appliance Kit (AK) 2013
Oracle Solaris Cluster 4
Oracle Solaris 11
Oracle Solaris 10
Oracle Siebel Applications 17.0
Oracle Siebel Applications 16.0
Oracle Service Bus 11.1.1.9.0
Oracle Service Bus 11.1.1.7.0
Oracle Secure Enterprise Search 11.2.2.2.0
Oracle Retail Xstore Point of Service 15.0.1
Oracle Retail Xstore Point of Service 15.0
Oracle Retail Workforce Management 1.64
Oracle Retail Workforce Management 1.60.7
Oracle Retail Warehouse Management System 15.0.1
Oracle Retail Warehouse Management System 14.1.3
Oracle Retail Warehouse Management System 14.0.4
Oracle Retail Open Commerce Platform 6.1
Oracle Retail Open Commerce Platform 6.0
Oracle Retail Open Commerce Platform 5.3
Oracle Retail Open Commerce Platform 5.2
Oracle Retail Open Commerce Platform 5.1
Oracle Retail Open Commerce Platform 5.0
Oracle Retail Open Commerce Platform 15.1
Oracle Retail Open Commerce Platform 15.0
Oracle Retail Customer Insights 16.0
Oracle Retail Customer Insights 15.0
Oracle Retail Allocation 16.0.1
Oracle Retail Allocation 15.0.1
Oracle Retail Allocation 14.1.3
Oracle Retail Allocation 14.0.4
Oracle Retail Allocation 13.3.1
Oracle REST Data Services 3.0.10
Oracle Primavera Unifier 9.14
Oracle Primavera Unifier 9.13
Oracle Primavera Unifier 16.2
Oracle Primavera Unifier 16.1
Oracle Primavera Unifier 15.2
Oracle Primavera Unifier 15.1
Oracle Primavera Unifier 10.1
Oracle Primavera Unifier 10.0
Oracle Primavera P6 Enterprise Project Portfolio Management 8.4
Oracle Primavera P6 Enterprise Project Portfolio Management 8.3
Oracle Primavera P6 Enterprise Project Portfolio Management 16.2
Oracle Primavera P6 Enterprise Project Portfolio Management 16.1
Oracle Primavera P6 Enterprise Project Portfolio Management 15.2
Oracle Primavera P6 Enterprise Project Portfolio Management 15.1
Oracle Primavera Gateway 16.2
Oracle Primavera Gateway 16.1
Oracle Primavera Gateway 15.2
Oracle Primavera Gateway 15.1
Oracle Primavera Gateway 14.2
Oracle Primavera Gateway 1.1
Oracle Primavera Gateway 1.0
Oracle Policy Automation 12.1.1
Oracle Policy Automation 12.1
Oracle Policy Automation 12.2.3
Oracle Policy Automation 12.2.2
Oracle PeopleSoft Enterprise PRTL Interaction Hub 9.1.0
Oracle PeopleSoft Enterprise PeopleTools 8.55
Oracle PeopleSoft Enterprise PeopleTools 8.54
Oracle PeopleSoft Enterprise FSCM 9.2
Oracle Payment Interface 6.1.1
Oracle Outside In Technology 8.5.3.0
Oracle Oracle Explorer 8.15
Oracle Oracle E-Business Suite Release 12 12.2.5
Oracle Oracle E-Business Suite Release 12 12.2.4
Oracle Oracle E-Business Suite Release 12 12.2.3
Oracle Oracle E-Business Suite Release 12 12.1.3
Oracle Oracle E-Business Suite Release 12 12.1.2
Oracle Oracle E-Business Suite Release 12 12.1.1
Oracle OpenSSO 3.0.0.8
Oracle OpenSSO 3.0.0.7
Oracle MySQL Server 5.7.18
Oracle MySQL Server 5.7.17
Oracle MySQL Server 5.7.16
Oracle MySQL Server 5.7.15
Oracle MySQL Server 5.7.12
Oracle MySQL Server 5.7
Oracle MySQL Server 5.6.36
Oracle MySQL Server 5.6.35
Oracle MySQL Server 5.6.34
Oracle MySQL Server 5.6.33
Oracle MySQL Server 5.6.30
Oracle MySQL Server 5.6.29
Oracle MySQL Server 5.6.28
Oracle MySQL Server 5.6.27
Oracle MySQL Server 5.6.26
Oracle MySQL Server 5.6.23
Oracle MySQL Server 5.6.22
Oracle MySQL Server 5.6.21
Oracle MySQL Server 5.5.56
Oracle MySQL Server 5.5.55
Oracle MySQL Server 5.5.54
Oracle MySQL Server 5.5.53
Oracle MySQL Server 5.5.52
Oracle MySQL Server 5.5.48
Oracle MySQL Server 5.5.47
Oracle MySQL Server 5.5.46
Oracle MySQL Server 5.5.45
Oracle MySQL Server 5.5.42
Oracle MySQL Server 5.5.41
Oracle MySQL Server 5.5.40
Oracle MySQL Server 5.6.25
Oracle MySQL Server 5.6.24
Oracle MySQL Server 5.6.20
Oracle MySQL Server 5.6.16
Oracle MySQL Server 5.6.15
Oracle MySQL Server 5.6
Oracle MySQL Server 5.5.44
Oracle MySQL Server 5.5.43
Oracle MySQL Server 5.5.36
Oracle MySQL Server 5.5.35
Oracle MySQL Enterprise Monitor 3.3.3.1199
Oracle MySQL Enterprise Monitor 3.3.2.1162
Oracle MySQL Enterprise Monitor 3.2.7.1204
Oracle MySQL Enterprise Monitor 3.2.5.1141
Oracle MySQL Enterprise Monitor 3.1.5.7958
Oracle MySQL Connectors 5.3.7
Oracle MySQL Connectors 6.1.10
Oracle MySQL Cluster 7.3.5
Oracle MICROS Workstation 650 0
Oracle MICROS PC Workstation 2015 0
Oracle MICROS BellaVita 2.7.0
Oracle JRockit R28.3.14
Oracle JRE(Windows Production Release) 1.8 Update 131
Oracle JRE(Windows Production Release) 1.7 Update 141
Oracle JRE(Windows Production Release) 1.6 Update 151
Oracle JRE(Solaris Production Release) 1.8 Update 131
Oracle JRE(Solaris Production Release) 1.7 Update 141
Oracle JRE(Solaris Production Release) 1.6 Update 151
Oracle JRE(Linux Production Release) 1.8 Update 131
Oracle JRE(Linux Production Release) 1.7 Update 141
Oracle JRE(Linux Production Release) 1.6 Update 151
Oracle JRE (Solaris Production Release) 1.8 Update 131
Oracle JRE (Solaris Production Release) 1.7 Update 141
Oracle JDK(Windows Production Release) 1.8 Update 131
Oracle JDK(Windows Production Release) 1.7 Update 141
Oracle JDK(Windows Production Release) 1.6 Update 151
Oracle JDK(Solaris Production Release) 1.8 Update 131
Oracle JDK(Solaris Production Release) 1.7 Update 141
Oracle JDK(Solaris Production Release) 1.6 Update 151
Oracle JDK(Linux Production Release) 1.8 Update 131
Oracle JDK(Linux Production Release) 1.7 Update 141
Oracle JDK(Linux Production Release) 1.6 Update 151
Oracle JDK (Solaris Production Release) 1.8 Update 131
Oracle JDK (Solaris Production Release) 1.7 Update 141
Oracle Java Advanced Management Console 2.6
Oracle iLearning 6.2
Oracle Hyperion Essbase 12.2.1.1
Oracle Hospitality WebSuite8 Cloud Service 8.9.6
Oracle Hospitality WebSuite8 Cloud Service 8.10.0
Oracle Hospitality Suites Management 3.7
Oracle Hospitality Suite8 8.10.0
Oracle Hospitality Simphony First Edition Venue Management 3.9
Oracle Hospitality Simphony First Edition 1.7.1
Oracle Hospitality Simphony 2.9
Oracle Hospitality Simphony 2.8
Oracle Hospitality RES 3700 5.5
Oracle Hospitality Reporting and Analytics 9.0
Oracle Hospitality Reporting and Analytics 8.5.1
Oracle Hospitality Property Interfaces 8.10.0
Oracle Hospitality OPERA 5 Property Services 5.4.3.0
Oracle Hospitality OPERA 5 Property Services 5.4.1.0
Oracle Hospitality OPERA 5 Property Services 5.4.0.0
Oracle Hospitality Materials Control 8.31.4
Oracle Hospitality Inventory Management 9.0
Oracle Hospitality Inventory Management 8.5.1
Oracle Hospitality Hotel Mobile 1.1
Oracle Hospitality Hotel Mobile 1.05
Oracle Hospitality Hotel Mobile 1.01
Oracle Hospitality Guest Access 4.2.1.0
Oracle Hospitality Guest Access 4.2.0.0
Oracle Hospitality e7 4.2.1
Oracle Hospitality Cruise Shipboard Property Management System 8.0.0.0
Oracle Hospitality Cruise Materials Management 7.30.562
Oracle Hospitality Cruise Fleet Management 9.0
Oracle Hospitality Cruise Dining Room Management 8.0.75
Oracle Hospitality Cruise AffairWhere 2.2.05.062
Oracle Fusion Middleware 11.1.2 3.0
Oracle Fusion Middleware 11.1.2 2.0
Oracle Fusion Middleware 11.1.1 7.0
Oracle Fusion Middleware 12.2.1.2.0
Oracle Fusion Middleware 12.2.1.1
Oracle Fusion Middleware 12.1.3.0.0
Oracle Fusion Middleware 11.1.1.9
Oracle Fusion Applications 11.1.9
Oracle Fusion Applications 11.1.8
Oracle Fusion Applications 11.1.7
Oracle Fusion Applications 11.1.6
Oracle Fusion Applications 11.1.5
Oracle Fusion Applications 11.1.4
Oracle Fusion Applications 11.1.3
Oracle Fusion Applications 11.1.2
Oracle FLEXCUBE Universal Banking 12.3
Oracle FLEXCUBE Universal Banking 12.2
Oracle FLEXCUBE Universal Banking 12.1
Oracle FLEXCUBE Universal Banking 12.0.3
Oracle FLEXCUBE Universal Banking 12.0.2
Oracle FLEXCUBE Universal Banking 12.0.1
Oracle FLEXCUBE Universal Banking 11.4
Oracle FLEXCUBE Universal Banking 11.3
Oracle FLEXCUBE Private Banking 12.0.1
Oracle FLEXCUBE Private Banking 2.2
Oracle FLEXCUBE Private Banking 2.0.1
Oracle FLEXCUBE Private Banking 2.0
Oracle FLEXCUBE Direct Banking 12.0.3
Oracle FLEXCUBE Direct Banking 12.0.2
Oracle Financial Services Behavior Detection Platform 8.0.2
Oracle Financial Services Behavior Detection Platform 8.0.1
Oracle Enterprise Session Border Controller ECZ7.3.0
Oracle Enterprise Repository 12.1.3.0.0
Oracle Enterprise Repository 11.1.1.7.0
Oracle Enterprise Manager Ops Center 12.3.2
Oracle Enterprise Manager Ops Center 12.2.2
Oracle Enterprise Manager Base Platform 12.1
Oracle Enterprise Manager Base Platform 13.2.0.0
Oracle Enterprise Manager Base Platform 13.1.0.0
Oracle Enterprise Data Quality 8.1.13.0.0
Oracle Enterprise Communications Broker PCZ210
Oracle Endeca Server 7.4
Oracle Endeca Server 7.7.0
Oracle Endeca Server 7.6.0
Oracle Endeca Server 7.5.0
Oracle Endeca Server 7.3.0
Oracle E-Business Suite Release 12 12.2.6
Oracle Database 12c Release 1 12.1 2
Oracle Database 12c Release 1 12.2.0.1
Oracle Database 11g Release 2 11.2.0.4
Oracle Data Integrator 12.2.1.1.0
Oracle Data Integrator 12.2.1.0.0
Oracle Data Integrator 12.1.3.0.0
Oracle Data Integrator 11.1.1.9.0
Oracle Data Integrator 11.1.1.7.0
Oracle Configuration Manager 11.1.0
Oracle Communications Session Router SCZ740
Oracle Communications Session Router SCZ730
Oracle Communications Session Router ECZ730
Oracle Communications Policy Management 11.5
Oracle Communications Network Charging and Control 5.0.2.0.0
Oracle Communications Network Charging and Control 5.0.1.0.0
Oracle Communications Network Charging and Control 5.0.0.2.0
Oracle Communications Network Charging and Control 5.0.0.1.0
Oracle Communications Network Charging and Control 4.4.1.5.0
Oracle Communications EAGLE LNP Application Processor 10.0
Oracle Communications Convergence 3.0.1
Oracle Communications Convergence 3.0
Oracle Communications BRM 11.3.0.0.0
Oracle Communications BRM 11.2.0.0.0
Oracle Commerce Guided Search 6.1.4
Oracle Commerce Guided Search 11.2
Oracle Commerce Guided Search 11.1
Oracle Commerce Guided Search 11.0
Oracle Commerce Experience Manager 6.1.4
Oracle Commerce Experience Manager 11.2
Oracle Commerce Experience Manager 11.1
Oracle Commerce Experience Manager 11.0
Oracle Business Transaction Management 12.1.0
Oracle Business Transaction Management 11.1.0
Oracle Business Intelligence Enterprise Edition 12.2.1.2.0
Oracle Business Intelligence Enterprise Edition 12.2.1.1.0
Oracle Business Intelligence Enterprise Edition 11.1.1.9.0
Oracle Business Intelligence Enterprise Edition 11.1.1.7.0
Oracle BI Publisher 12.2.1.2.0
Oracle BI Publisher 12.2.1.0.0
Oracle BI Publisher 11.1.1.9.0
Oracle BI Publisher 11.1.1.7.0
Oracle Banking Platform 2.5.0
Oracle Banking Platform 2.4.1
Oracle Banking Platform 2.4.0
Oracle Banking Platform 2.3.0
Oracle Application Testing Suite 12.5.0.3
Oracle Application Testing Suite 12.5.0.2
Oracle Application Management Pack for Oracle E-Business Suite AMP 13.1.1.1.0
Oracle Application Management Pack for Oracle E-Business Suite AMP 12.1.0.4.0
Oracle API Gateway 11.1.2.4.0
Oracle Agile PLM 9.3.5
Oracle Agile PLM AMP 12.1.0.4.0
Not Vulnerable:

Discussion

Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

Oracle has released advance notification regarding the July 2017 Critical Patch Update (CPU) to be released on July 18, 2017. The update addresses 315 vulnerabilities affecting the following software:

Oracle Database Server
Oracle REST Data Services
Oracle API Gateway
Oracle BI Publisher
Oracle Business Intelligence Enterprise Edition
Oracle Data Integrator
Oracle Endeca Server
Oracle Enterprise Data Quality
Oracle Enterprise Repository
Oracle Fusion Middleware
Oracle OpenSSO
Oracle Outside In Technology
Oracle Secure Enterprise Search
Oracle Service Bus
Oracle Traffic Director
Oracle Tuxedo
Oracle Tuxedo System and Applications Monitor
Oracle WebCenter Content
Oracle WebLogic Server
Hyperion Essbase
Enterprise Manager Base Platform
Enterprise Manager Ops Center
Oracle Application Testing Suite
Oracle Business Transaction Management
Oracle Configuration Manager
Application Management Pack for Oracle E-Business Suite
Oracle E-Business Suite
Oracle Agile PLM
Oracle Transportation Management
PeopleSoft Enterprise FSCM
PeopleSoft Enterprise PeopleTools
PeopleSoft Enterprise PRTL Interaction Hub
Siebel Applications
Oracle Commerce Guided Search / Oracle Commerce Experience Manager
Oracle iLearning
Oracle Fusion Applications
Oracle Communications BRM
Oracle Communications Convergence
Oracle Communications EAGLE LNP Application Processor
Oracle Communications Network Charging and Control
Oracle Communications Policy Management
Oracle Communications Session Router
Oracle Enterprise Communications Broker
Oracle Enterprise Session Border Controller
Financial Services Behavior Detection Platform
Oracle Banking Platform
Oracle FLEXCUBE Direct Banking
Oracle FLEXCUBE Private Banking
Oracle FLEXCUBE Universal Banking
Hospitality Hotel Mobile
Hospitality Property Interfaces
Hospitality Suite8
Hospitality WebSuite8 Cloud Service
MICROS BellaVita
MICROS PC Workstation 2015
MICROS Workstation 650
Oracle Hospitality 9700
Oracle Hospitality Cruise AffairWhere
Oracle Hospitality Cruise Dining Room Management
Oracle Hospitality Cruise Fleet Management
Oracle Hospitality Cruise Materials Management
Oracle Hospitality Cruise Shipboard Property Management System
Oracle Hospitality e7
Oracle Hospitality Guest Access
Oracle Hospitality Inventory Management
Oracle Hospitality Materials Control
Oracle Hospitality OPERA 5 Property Services
Oracle Hospitality Reporting and Analytics
Oracle Hospitality RES 3700
Oracle Hospitality Simphony
Oracle Hospitality Simphony First Edition
Oracle Hospitality Simphony First Edition Venue Management
Oracle Hospitality Suites Management
Oracle Payment Interface
Oracle Retail Allocation
Oracle Retail Customer Insights
Oracle Retail Open Commerce Platform
Oracle Retail Warehouse Management System
Oracle Retail Workforce Management
Oracle Retail Xstore Point of Service
Oracle Policy Automation
Primavera Gateway
Primavera P6 Enterprise Project Portfolio Management
Primavera Unifier
Java Advanced Management Console
Oracle Java SE
Oracle Java SE Embedded
Oracle JRockit
Solaris
Solaris Cluster
Sun ZFS Storage Appliance Kit (AK)
Oracle VM VirtualBox
MySQL Cluster
MySQL Connectors
MySQL Enterprise Monitor
MySQL Server
Oracle Explorer

Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.

Exploit / POC

Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

Some of these issues may not require specific exploit code and may be trivial to exploit.

Solution / Fix

Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

Solution:
The vendor planned to release updates to address these issues on July 18, 2017. Please see the references for more information.

References

Oracle July 2017 Critical Patch Update Multiple Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report