Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-0699 1 Oracle 1 Flexcube Direct Banking 2016-12-03 9.4 HIGH 9.1 CRITICAL
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component.
CVE-2016-0698 1 Oracle 1 Peoplesoft Enterprise Peopletools 2016-12-03 4.3 MEDIUM 5.4 MEDIUM
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423.
CVE-2016-0697 1 Oracle 1 Application Object Library 2016-12-03 3.6 LOW 6.0 MEDIUM
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2016-0691 1 Oracle 1 Database 2016-12-03 4.0 MEDIUM 3.3 LOW
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690.
CVE-2016-0690 1 Oracle 1 Database 2016-12-03 4.0 MEDIUM 3.3 LOW
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691.
CVE-2016-0680 1 Oracle 1 Peoplesoft Supply Chain Management Eprocurement 2016-12-03 5.5 MEDIUM 5.4 MEDIUM
Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.
CVE-2016-0693 1 Oracle 1 Solaris 2016-12-03 10.0 HIGH 9.8 CRITICAL
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.
CVE-2016-0671 1 Oracle 1 Http Server 2016-12-03 2.6 LOW 3.7 LOW
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.
CVE-2016-0669 1 Oracle 1 Solaris 2016-12-03 5.2 MEDIUM 6.0 MEDIUM
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash.
CVE-2016-0667 1 Oracle 1 Mysql 2016-12-03 2.8 LOW 4.4 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking.
CVE-2016-0479 1 Oracle 1 Business Intelligence 2016-12-03 5.8 MEDIUM 6.1 MEDIUM
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard.
CVE-2016-0663 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 4.7 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema.
CVE-2016-0662 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition.
CVE-2016-0659 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
CVE-2016-0658 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer.
CVE-2016-0657 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.
CVE-2016-0656 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654.
CVE-2016-0468 1 Oracle 1 Business Intelligence 2016-12-03 3.5 LOW 5.4 MEDIUM
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-0469 1 Oracle 1 Micros C2 2016-12-03 4.6 MEDIUM 5.5 MEDIUM
Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS.
CVE-2016-0623 1 Oracle 1 Solaris 2016-12-03 4.3 MEDIUM 4.7 MEDIUM
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component.
CVE-2016-0652 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML.
CVE-2016-0654 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656.
CVE-2016-0653 1 Oracle 1 Mysql 2016-12-03 3.5 LOW 5.5 MEDIUM
Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS.
CVE-2016-0407 1 Oracle 1 Peoplesoft Enterprise Human Capital Management Human Resources 2016-12-03 4.0 MEDIUM 6.5 MEDIUM
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.
CVE-2016-0408 1 Oracle 1 Peoplesoft Enterprise Peopletools 2016-12-03 4.3 MEDIUM 5.4 MEDIUM
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.
CVE-2015-2579 1 Oracle 1 Health Sciences Applications 2016-12-03 2.1 LOW N/A
Unspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health Sciences Applications 8.0 allows local users to affect confidentiality via vectors related to BIP Installer.
CVE-2016-4480 2 Oracle, Xen 2 Vm Server, Xen 2016-12-01 7.2 HIGH 8.4 HIGH
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
CVE-2015-1829 1 Oracle 1 Fusion Middleware 2016-11-30 5.0 MEDIUM N/A
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.
CVE-2016-5563 1 Oracle 1 Hospitality Opera 5 Property Services 2016-11-28 6.0 MEDIUM 7.9 HIGH
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators to affect confidentiality, integrity, and availability via vectors related to OPERA.
CVE-2016-5565 1 Oracle 1 Hospitality Opera 5 Property Services 2016-11-28 4.0 MEDIUM 7.7 HIGH
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.
CVE-2016-5564 1 Oracle 1 Hospitality Opera 5 Property Services 2016-11-28 6.5 MEDIUM 7.4 HIGH
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to OPERA.
CVE-2016-5580 1 Oracle 1 Secure Global Desktop 2016-11-28 5.5 MEDIUM 9.6 CRITICAL
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.
CVE-2016-5560 1 Oracle 1 Siebel Customer Order Management 2016-11-28 5.5 MEDIUM 5.4 MEDIUM
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.
CVE-2016-5599 1 Oracle 1 Advanced Supply Chain Planning 2016-11-28 6.4 MEDIUM 9.1 CRITICAL
Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.
CVE-2016-5524 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 5.0 MEDIUM 5.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.
CVE-2016-5486 1 Oracle 1 Sun Zfs Storage Appliance Kit 2016-11-28 4.9 MEDIUM 5.5 MEDIUM
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.
CVE-2016-5523 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.
CVE-2016-5526 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 7.5 HIGH 7.3 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.
CVE-2016-5527 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.3 MEDIUM 5.9 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.
CVE-2016-5534 1 Oracle 1 Siebel User Interface Framework 2016-11-28 4.0 MEDIUM 6.5 MEDIUM
Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5539 1 Oracle 1 Micros Xstore Payment 2016-11-28 4.6 MEDIUM 7.3 HIGH
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5540 1 Oracle 1 Micros Xstore Payment 2016-11-28 3.3 LOW 6.7 MEDIUM
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5522 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.0 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5521 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 7.5 HIGH 6.5 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.
CVE-2016-5518 1 Oracle 1 Agile Engineering Data Management 2016-11-28 6.8 MEDIUM 8.1 HIGH
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5515 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.
CVE-2016-5514 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet.
CVE-2016-5513 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.0 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
CVE-2016-5512 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.3 MEDIUM 6.1 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521.
CVE-2016-5510 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 5.0 MEDIUM 5.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.