Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-10-16 CVE-2012-1751 SQL Injection vulnerability in Oracle Database Server 11.1.0.7/11.2.0.2/11.2.0.3
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to flashback archive.
network
low complexity
oracle
6.5
2012-10-16 CVE-2012-1686 Cross-Site Scripting vulnerability in Oracle Fusion Middleware 11.1.1.6.0
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.6 and other versions allows remote attackers to affect integrity via unknown vectors related to Installation.
network
oracle
4.3
2012-10-16 CVE-2012-1685 Remote Security vulnerability in Oracle Virtualization 4.6
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 allows remote attackers to affect integrity via unknown vectors related to Core.
network
oracle
4.3
2012-10-16 CVE-2012-0518 Open Redirect vulnerability in Oracle Fusion Middleware 10.1.4.3
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
network
low complexity
oracle CWE-601
4.7
2012-10-16 CVE-2012-0107 Remote Security vulnerability in Oracle Fusion Middleware 10.1.3.6.0
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect availability via unknown vectors related to Web.
network
oracle
4.3
2012-10-16 CVE-2012-0106 Remote Security vulnerability in Oracle Fusion Middleware 10.1.3.6.0
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web.
network
oracle
4.9
2012-10-16 CVE-2012-0093 Remote Security vulnerability in Oracle Fusion Middleware 10.1.3.6.0
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0071.
network
oracle
4.3
2012-10-16 CVE-2012-0071 Remote Security vulnerability in Oracle Fusion Middleware 10.1.3.6.0
Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0093.
network
oracle
4.3
2012-10-16 CVE-2012-5082 Remote Security vulnerability in Oracle Java SE
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect availability via unknown vectors.
network
low complexity
oracle
5.0
2012-10-16 CVE-2012-5081 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.
network
low complexity
oracle sun
5.0