Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-05-03 CVE-2012-0535 Remote Oracle Application Object Library vulnerability in Oracle E-Business Suite 12.0.6/12.1.3
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page.
network
low complexity
oracle
5.0
2012-05-03 CVE-2012-0534 Remote RDBMS Core vulnerability in Oracle Database Server
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.
network
low complexity
oracle
4.0
2012-05-03 CVE-2012-0533 Remote vulnerability in Oracle PeopleSoft Enterprise FCSM
Unspecified vulnerability in the PeopleSoft Enterprise FCSM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Receivables.
network
low complexity
oracle
4.0
2012-05-03 CVE-2012-0532 Remote vulnerability in Oracle Identity Manager
Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Config Management.
network
low complexity
oracle
5.5
2012-05-03 CVE-2012-0530 Remote vulnerability in Oracle PeopleSoft Enterprise SCM
Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement.
network
low complexity
oracle
4.0
2012-05-03 CVE-2012-0528 Remote Session Fixation vulnerability in Oracle Database Server
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7, and Oracle Enterprise Manager Grid Control, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Framework.
network
oracle
5.8
2012-05-03 CVE-2012-0527 Remote HTTP Response Splitting vulnerability in Oracle Database Server
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0526.
network
oracle
4.3
2012-05-03 CVE-2012-0526 Remote HTTP Response Splitting vulnerability in Oracle Database Server
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0527.
network
oracle
4.3
2012-05-03 CVE-2012-0525 SQL Injection vulnerability in Oracle Enterprise Manager
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.
network
oracle
4.9
2012-05-03 CVE-2012-0522 Remote vulnerability in Oracle Fusion Middleware 10.1.3.5
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Java Business Objects.
network
oracle
4.3