Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-01-18 CVE-2011-3565 Local Security vulnerability in Oracle Communications Unified 7.0
Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Calendar Server.
local
low complexity
oracle
4.6
2012-01-18 CVE-2011-3531 Remote Oracle Web Services Manager vulnerability in Oracle Web Services Manager
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security.
network
low complexity
oracle
5.0
2012-01-18 CVE-2011-3524 Information Disclosure vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509.
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-3514 Remote Security Bypass vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-3509 Remote File Disclosure vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-2326 Information Disclosure vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-2325 Password Disclosure Security vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-2324 Denial Of Service vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).
network
low complexity
oracle
5.0
2012-01-18 CVE-2011-2321 Information Disclosure vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDNET).
network
low complexity
oracle
4.0
2012-01-18 CVE-2011-2317 Arbitrary File Upload vulnerability in Oracle products
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC (JDNET).
network
low complexity
oracle
4.0