Vulnerabilities > Oracle

DATE CVE VULNERABILITY TITLE RISK
2016-10-25 CVE-2016-8291 Improper Access Control vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
network
low complexity
oracle CWE-284
8.2
2016-10-25 CVE-2016-8290 Unspecified vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-5633.
network
high complexity
oracle
4.4
2016-10-25 CVE-2016-8289 Permissions, Privileges, and Access Controls vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.
local
high complexity
oracle CWE-264
4.7
2016-10-25 CVE-2016-8288 Improper Access Control vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB Plugin.
network
high complexity
oracle CWE-284
3.1
2016-10-25 CVE-2016-8287 Unspecified vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.
network
low complexity
oracle
4.5
2016-10-25 CVE-2016-8286 Information Exposure vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to affect confidentiality via vectors related to Server: Security: Privileges.
network
high complexity
oracle CWE-200
3.1
2016-10-25 CVE-2016-8285 Improper Access Control vulnerability in Oracle Peoplesoft Enterprise Human Capital Management Candidate Gateway 9.2
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote administrators to affect confidentiality and integrity via vectors related to Candidate Gateway.
network
high complexity
oracle CWE-284
4.8
2016-10-25 CVE-2016-8284 Unspecified vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication.
local
high complexity
oracle
1.8
2016-10-25 CVE-2016-8283 Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
network
low complexity
oracle mariadb
4.3
2016-10-25 CVE-2016-8281 Improper Access Control vulnerability in Oracle Platform Security for Java 12.1.3.0.0/12.2.1.0.0/12.2.1.1.0
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-5536.
network
low complexity
oracle CWE-284
7.6