CVE# 	Product 	Component 	Protocol 	Remote
Exploit
without
Auth.? 	CVSS VERSION 3.0 RISK (see Risk Matrix Definitions) 	Supported Versions Affected 	Notes
Base
Score 	Attack
Vector 	Attack
Complex 	Privs
Req'd 	User
Interact 	Scope 	Confid-
entiality 	Inte-
grity 	Avail-
ability
CVE-2018-2613 	Oracle Argus Safety 	Login 	HTTP 	Yes 	8.2 	Network 	Low 	None 	None 	Un-
changed 	High 	Low 	None 	7.x, 8.0.x, 8.1
CVE-2018-2642 	Oracle Argus Safety 	File Upload 	HTTP 	No 	6.5 	Network 	Low 	Low 	Required 	Changed 	Low 	Low 	Low 	7.x, 8.0.x
CVE-2018-2643 	Oracle Argus Safety 	Case Selection 	HTTP 	No 	6.4 	Network 	Low 	Low 	None 	Changed 	Low 	Low 	None 	7.x, 8.0.x
CVE-2018-2644 	Oracle Argus Safety 	Worklist 	HTTP 	Yes 	6.1 	Network 	Low 	None 	Required 	Changed 	Low 	Low 	None 	7.x, 8.0.x, 8.1
CVE-2017-9072 	Oracle Health Sciences Empirica Inspections 	UI (Calendar) 	HTTP 	Yes 	6.1 	Network 	Low 	None 	Required 	Changed 	Low 	Low 	None 	1.0.1.1
CVE-2017-9072 	Oracle Health Sciences Empirica Signal 	UI (Calendar) 	HTTP 	Yes 	6.1 	Network 	Low 	None 	Required 	Changed 	Low 	Low 	None 	8.0.1.0
CVE-2017-12617 	Oracle Health Sciences Empirica Inspections 	Base (Apache Tomcat) 	HTTP 	Yes 	4.8 	Network 	High 	None 	None 	Un-
changed 	Low 	Low 	None 	1.0.1.1


Additional CVEs addressed are below:

    The fix for CVE-2017-12617 also addresses CVE-2017-5664.