Vulnerabilities > Oracle

DATE CVE VULNERABILITY TITLE RISK
2016-10-25 CVE-2016-5580 Improper Access Control vulnerability in Oracle Secure Global Desktop 4.7/5.2
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.
network
low complexity
oracle CWE-284
critical
9.6
2016-10-25 CVE-2016-5579 Improper Access Control vulnerability in Oracle Outside in Technology
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5577, CVE-2016-5578, and CVE-2016-5588.
network
low complexity
oracle CWE-284
8.6
2016-10-25 CVE-2016-5578 Improper Access Control vulnerability in Oracle Outside in Technology
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5577, CVE-2016-5579, and CVE-2016-5588.
network
low complexity
oracle CWE-284
8.6
2016-10-25 CVE-2016-5577 Improper Access Control vulnerability in Oracle Outside in Technology
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5578, CVE-2016-5579, and CVE-2016-5588.
network
low complexity
oracle CWE-284
8.6
2016-10-25 CVE-2016-5576 Improper Access Control vulnerability in Oracle Solaris 11.3
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.
local
low complexity
oracle CWE-284
5.5
2016-10-25 CVE-2016-5575 Improper Access Control vulnerability in Oracle Common Applications
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.
network
low complexity
oracle CWE-284
5.3
2016-10-25 CVE-2016-5574 Improper Access Control vulnerability in Oracle Outside in Technology
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5577, CVE-2016-5578, CVE-2016-5579, and CVE-2016-5588.
network
low complexity
oracle CWE-284
8.6
2016-10-25 CVE-2016-5573 Permissions, Privileges, and Access Controls vulnerability in Oracle JDK and JRE
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
network
high complexity
oracle CWE-264
8.3
2016-10-25 CVE-2016-5572 Permissions, Privileges, and Access Controls vulnerability in Oracle Database 12.1.0.2
Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
local
high complexity
oracle CWE-264
6.4
2016-10-25 CVE-2016-5571 Improper Access Control vulnerability in Oracle Applications DBA
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5567.
network
low complexity
oracle CWE-284
6.5