Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-08-02 CVE-2016-5403 Resource Exhaustion vulnerability in multiple products
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
local
low complexity
canonical oracle qemu debian redhat CWE-400
4.9
2016-07-21 CVE-2016-5477 Remote Security vulnerability in Oracle GlassFish Server 2.1.1/3.0.1
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
network
low complexity
oracle
5.0
2016-07-21 CVE-2016-5476 Remote Security vulnerability in Oracle Retail Integration Bus
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
network
low complexity
oracle
6.5
2016-07-21 CVE-2016-5468 Remote Security vulnerability in Oracle Siebel UI Framework
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451.
network
low complexity
oracle
5.5
2016-07-21 CVE-2016-5467 Remote Security vulnerability in Oracle Peoplesoft Enterprise SCM Eprocurement 9.1/9.2
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement.
network
low complexity
oracle
5.5
2016-07-21 CVE-2016-5466 Remote Security vulnerability in Oracle Siebel CRM
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-3450 and CVE-2016-5460.
network
oracle
4.3
2016-07-21 CVE-2016-5465 Remote Security vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.53/8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Panel Processor.
network
oracle
5.8
2016-07-21 CVE-2016-5462 Remote Security vulnerability in Oracle Siebel CRM
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote administrators to affect confidentiality via vectors related to Workspaces.
network
low complexity
oracle
4.0
2016-07-21 CVE-2016-5461 Remote Security vulnerability in Oracle Siebel CRM
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
network
low complexity
oracle
4.0
2016-07-21 CVE-2016-5460 Remote Security vulnerability in Oracle Siebel CRM
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-3450 and CVE-2016-5466.
network
oracle
4.3