# Vulnerabilities published in 2017


- [CVE-2017-3597](https://insights.sbomify.com/CVE-2017-3597/): Other in WebCenter Sites (medium 5.7)
- [CVE-2017-3596](https://insights.sbomify.com/CVE-2017-3596/): Other in WebCenter Sites (high 7.6)
- [CVE-2017-3595](https://insights.sbomify.com/CVE-2017-3595/): Other in WebCenter Sites (high 7.1)
- [CVE-2017-3594](https://insights.sbomify.com/CVE-2017-3594/): Other in WebCenter Sites (medium 5.9)
- [CVE-2017-3593](https://insights.sbomify.com/CVE-2017-3593/): Other in WebCenter Sites (high 7.1)
- [CVE-2017-3592](https://insights.sbomify.com/CVE-2017-3592/): Other in Payroll (medium 6.5)
- [CVE-2017-3591](https://insights.sbomify.com/CVE-2017-3591/): Other in WebCenter Sites (high 7.1)
- [CVE-2017-3590](https://insights.sbomify.com/CVE-2017-3590/): MySQL Connectors Privilege Escalation (low 3.3)
- [CVE-2017-3589](https://insights.sbomify.com/CVE-2017-3589/): Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java (low 3.3)
- [CVE-2017-3588](https://insights.sbomify.com/CVE-2017-3588/): Other in Solaris Cluster (high 7.3)
- [CVE-2017-3587](https://insights.sbomify.com/CVE-2017-3587/): Other in Oracle VM VirtualBox (high 8.4)
- [CVE-2017-3586](https://insights.sbomify.com/CVE-2017-3586/): Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java (medium 6.4)
- [CVE-2017-3585](https://insights.sbomify.com/CVE-2017-3585/): Other in Sun ZFS Storage Appliance Kit (AK) Software (medium 5.3)
- [CVE-2017-3584](https://insights.sbomify.com/CVE-2017-3584/): Other in Sun ZFS Storage Appliance Kit (AK) Software (high 7.8)
- [CVE-2017-3583](https://insights.sbomify.com/CVE-2017-3583/): Other in Primavera P6 Enterprise Project Portfolio Management (high 8.1)
- [CVE-2017-3582](https://insights.sbomify.com/CVE-2017-3582/): Other in SuperCluster Specific Software (high 8.4)
- [CVE-2017-3581](https://insights.sbomify.com/CVE-2017-3581/): Other in Automatic Service Request (ASR) (high 7.8)
- [CVE-2017-3580](https://insights.sbomify.com/CVE-2017-3580/): Other in Sun ZFS Storage Appliance Kit (AK) Software (high 8.3)
- [CVE-2017-3579](https://insights.sbomify.com/CVE-2017-3579/): Cross-site scripting in Primavera P6 Enterprise Project Portfolio Management (medium 6.1)
- [CVE-2017-3578](https://insights.sbomify.com/CVE-2017-3578/): Other in Sun ZFS Storage Appliance Kit (AK) Software (high 8.8)
- [CVE-2017-3577](https://insights.sbomify.com/CVE-2017-3577/): Other in PeopleSoft Enterprise CS Campus Community (medium 6.5)
- [CVE-2017-3576](https://insights.sbomify.com/CVE-2017-3576/): Other in Oracle VM VirtualBox (high 8.8)
- [CVE-2017-3575](https://insights.sbomify.com/CVE-2017-3575/): Other in Oracle VM VirtualBox (high 7.9)
- [CVE-2017-3574](https://insights.sbomify.com/CVE-2017-3574/): Other in Hospitality OPERA 5 Property Services (high 7.1)
- [CVE-2017-3573](https://insights.sbomify.com/CVE-2017-3573/): Cross-site scripting in Hospitality OPERA 5 Property Services (medium 6.1)
- [CVE-2017-3572](https://insights.sbomify.com/CVE-2017-3572/): Denial of service in Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5)
- [CVE-2017-3571](https://insights.sbomify.com/CVE-2017-3571/): Other in PeopleSoft Enterprise SCM eBill Payment (medium 6.5)
- [CVE-2017-3570](https://insights.sbomify.com/CVE-2017-3570/): Other in PeopleSoft Enterprise FIN eSettlements (medium 6.5)
- [CVE-2017-3569](https://insights.sbomify.com/CVE-2017-3569/): Other in Hospitality OPERA 5 Property Services (medium 5.4)
- [CVE-2017-3568](https://insights.sbomify.com/CVE-2017-3568/): Other in Hospitality OPERA 5 Property Services (medium 6.5)
- [CVE-2017-3567](https://insights.sbomify.com/CVE-2017-3567/): Denial of service in Oracle Database (medium 5.3)
- [CVE-2017-3565](https://insights.sbomify.com/CVE-2017-3565/): Other in Solaris Operating System (high 7.9)
- [CVE-2017-3564](https://insights.sbomify.com/CVE-2017-3564/): Privilege escalation in Solaris Operating System (high 8.2)
- [CVE-2017-3563](https://insights.sbomify.com/CVE-2017-3563/): Security feature bypass in Oracle VM VirtualBox (high 8.8)
- [CVE-2017-3562](https://insights.sbomify.com/CVE-2017-3562/): Other in Applications DBA (medium 6.5)
- [CVE-2017-3561](https://insights.sbomify.com/CVE-2017-3561/): Other in Oracle VM VirtualBox (high 8.8)
- [CVE-2017-3560](https://insights.sbomify.com/CVE-2017-3560/): Information disclosure in Hospitality OPERA 5 Property Services (medium 4.3)
- [CVE-2017-3559](https://insights.sbomify.com/CVE-2017-3559/): Other in Oracle VM VirtualBox (high 7.9)
- [CVE-2017-3558](https://insights.sbomify.com/CVE-2017-3558/): Other in Oracle VM VirtualBox (high 8.5)
- [CVE-2017-3557](https://insights.sbomify.com/CVE-2017-3557/): Cross-site scripting in One-to-One Fulfillment (high 7.1)
- [CVE-2017-3556](https://insights.sbomify.com/CVE-2017-3556/): Information disclosure in Application Object Library (medium 5.3)
- [CVE-2017-3555](https://insights.sbomify.com/CVE-2017-3555/): Denial of service in iReceivables (high 7.5)
- [CVE-2017-3554](https://insights.sbomify.com/CVE-2017-3554/): Other in WebCenter Sites (high 8.1)
- [CVE-2017-3553](https://insights.sbomify.com/CVE-2017-3553/): Other in Identity Manager (critical 9.9)
- [CVE-2017-3552](https://insights.sbomify.com/CVE-2017-3552/): Information disclosure in Hospitality OPERA 5 Property Services (medium 4.3)
- [CVE-2017-3551](https://insights.sbomify.com/CVE-2017-3551/): Other in Solaris Operating System (medium 6.6)
- [CVE-2017-3550](https://insights.sbomify.com/CVE-2017-3550/): Other in Customer Interaction History (high 7.1)
- [CVE-2017-3549](https://insights.sbomify.com/CVE-2017-3549/): SQL injection in Scripting (critical 9.1)
- [CVE-2017-3548](https://insights.sbomify.com/CVE-2017-3548/): XML external entity in PeopleSoft Enterprise PT PeopleTools (medium 6.5)
- [CVE-2017-3547](https://insights.sbomify.com/CVE-2017-3547/): Other in PeopleSoft Enterprise PT PeopleTools (high 7.4)
- [CVE-2017-3546](https://insights.sbomify.com/CVE-2017-3546/): Server-side request forgery in PeopleSoft Enterprise PT PeopleTools (medium 6.5)
- [CVE-2017-3545](https://insights.sbomify.com/CVE-2017-3545/): Other in WebCenter Sites (high 8.2)
- [CVE-2017-3544](https://insights.sbomify.com/CVE-2017-3544/): Other in Java (low 3.7)
- [CVE-2017-3543](https://insights.sbomify.com/CVE-2017-3543/): Other in WebCenter Sites (high 8.6)
- [CVE-2017-3542](https://insights.sbomify.com/CVE-2017-3542/): Other in WebCenter Sites (high 8.6)
- [CVE-2017-3541](https://insights.sbomify.com/CVE-2017-3541/): Other in WebCenter Sites (high 8.2)
- [CVE-2017-3540](https://insights.sbomify.com/CVE-2017-3540/): Other in WebCenter Sites (high 8.6)
- [CVE-2017-3539](https://insights.sbomify.com/CVE-2017-3539/): Other in Java (low 3.1)
- [CVE-2017-3538](https://insights.sbomify.com/CVE-2017-3538/): Other in Oracle VM VirtualBox (high 7.5)
- [CVE-2017-3537](https://insights.sbomify.com/CVE-2017-3537/): Cross-site scripting in Real-Time Scheduler (medium 6.1)
- [CVE-2017-3536](https://insights.sbomify.com/CVE-2017-3536/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.6)
- [CVE-2017-3535](https://insights.sbomify.com/CVE-2017-3535/): Other in FLEXCUBE Universal Banking (medium 4.7)
- [CVE-2017-3534](https://insights.sbomify.com/CVE-2017-3534/): Other in FLEXCUBE Universal Banking (medium 6.5)
- [CVE-2017-3533](https://insights.sbomify.com/CVE-2017-3533/): Other in Java (low 3.7)
- [CVE-2017-3532](https://insights.sbomify.com/CVE-2017-3532/): Other in Retail Warehouse Management System (medium 6.1)
- [CVE-2017-3531](https://insights.sbomify.com/CVE-2017-3531/): Other in WebLogic Server (high 7.2)
- [CVE-2017-3530](https://insights.sbomify.com/CVE-2017-3530/): Other in Transportation Management (medium 6.1)
- [CVE-2017-3529](https://insights.sbomify.com/CVE-2017-3529/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2017-3528](https://insights.sbomify.com/CVE-2017-3528/): Open redirect in Applications Framework (medium 5.4)
- [CVE-2017-3527](https://insights.sbomify.com/CVE-2017-3527/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 5.3)
- [CVE-2017-3526](https://insights.sbomify.com/CVE-2017-3526/): Denial of service in Java (medium 5.9)
- [CVE-2017-3525](https://insights.sbomify.com/CVE-2017-3525/): Other in PeopleSoft Enterprise SCM Services Procurement (medium 6.5)
- [CVE-2017-3524](https://insights.sbomify.com/CVE-2017-3524/): Other in PeopleSoft Enterprise SCM Strategic Sourcing (medium 6.5)
- [CVE-2017-3523](https://insights.sbomify.com/CVE-2017-3523/): Improper Access Control in MySQL Connectors Java (high 8.5)
- [CVE-2017-3522](https://insights.sbomify.com/CVE-2017-3522/): Other in PeopleSoft Enterprise SCM eSupplier Connection (medium 6.5)
- [CVE-2017-3521](https://insights.sbomify.com/CVE-2017-3521/): Other in PeopleSoft Enterprise SCM Purchasing (medium 6.5)
- [CVE-2017-3520](https://insights.sbomify.com/CVE-2017-3520/): Other in PeopleSoft Enterprise PT PeopleTools (medium 6.5)
- [CVE-2017-3519](https://insights.sbomify.com/CVE-2017-3519/): Other in PeopleSoft Enterprise PT PeopleTools (high 7.5)
- [CVE-2017-3518](https://insights.sbomify.com/CVE-2017-3518/): Denial of service in Enterprise Manager Base Platform (high 7.5)
- [CVE-2017-3517](https://insights.sbomify.com/CVE-2017-3517/): Other in JD Edwards EnterpriseOne Tools (medium 6.5)
- [CVE-2017-3516](https://insights.sbomify.com/CVE-2017-3516/): Denial of service in Solaris Operating System (high 7.7)
- [CVE-2017-3515](https://insights.sbomify.com/CVE-2017-3515/): Other in User Management (medium 5.4)
- [CVE-2017-3514](https://insights.sbomify.com/CVE-2017-3514/): Other in Java (high 8.3)
- [CVE-2017-3513](https://insights.sbomify.com/CVE-2017-3513/): Information disclosure in Oracle VM VirtualBox (low 2.5)
- [CVE-2017-3512](https://insights.sbomify.com/CVE-2017-3512/): Other in Java (high 8.3)
- [CVE-2017-3511](https://insights.sbomify.com/CVE-2017-3511/): Other in Java (high 7.7)
- [CVE-2017-3510](https://insights.sbomify.com/CVE-2017-3510/): Other in Solaris Operating System (critical 9.6)
- [CVE-2017-3509](https://insights.sbomify.com/CVE-2017-3509/): Other in Java (medium 4.2)
- [CVE-2017-3508](https://insights.sbomify.com/CVE-2017-3508/): Other in Primavera Gateway (critical 9.1)
- [CVE-2017-3507](https://insights.sbomify.com/CVE-2017-3507/): Other in Service Bus (high 7.3)
- [CVE-2017-3506](https://insights.sbomify.com/CVE-2017-3506/): Oracle WebLogic Server OS Command Injection (high 7.4, exploited in the wild)
- [CVE-2017-3505](https://insights.sbomify.com/CVE-2017-3505/): Other in Automatic Service Request (ASR) (medium 5.1)
- [CVE-2017-3504](https://insights.sbomify.com/CVE-2017-3504/): Other in oracle:automatic service request (medium 5.1)
- [CVE-2017-3503](https://insights.sbomify.com/CVE-2017-3503/): Other in Primavera P6 Enterprise Project Portfolio Management (critical 9.9)
- [CVE-2017-3502](https://insights.sbomify.com/CVE-2017-3502/): Other in PeopleSoft Enterprise FIN Receivables (medium 5.3)
- [CVE-2017-3501](https://insights.sbomify.com/CVE-2017-3501/): Cross-site scripting in Primavera Unifier (medium 6.1)
- [CVE-2017-3500](https://insights.sbomify.com/CVE-2017-3500/): Other in Primavera Gateway (high 8.7)
- [CVE-2017-3499](https://insights.sbomify.com/CVE-2017-3499/): Other in Social Network (high 7.5)
- [CVE-2017-3498](https://insights.sbomify.com/CVE-2017-3498/): Information disclosure in Solaris Operating System (low 3.3)
- [CVE-2017-3497](https://insights.sbomify.com/CVE-2017-3497/): Other in Solaris Operating System (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/47/