Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-10-25 CVE-2016-5560 Improper Access Control vulnerability in Oracle Siebel Customer Order Management 16.1
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.
network
low complexity
oracle CWE-284
5.4
2016-10-25 CVE-2016-5559 Unspecified vulnerability in Oracle Solaris 10/11.3
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.
local
high complexity
oracle
4.1
2016-10-25 CVE-2016-5554 Unspecified vulnerability in Oracle JDK and JRE
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
network
low complexity
oracle
4.3
2016-10-25 CVE-2016-5553 Unspecified vulnerability in Oracle Solaris 10/11.3
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.
local
low complexity
oracle
5.0
2016-10-25 CVE-2016-5543 Unspecified vulnerability in Oracle Flexcube Enterprise Limits and Collateral Management 12.0.0/12.1.0
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
network
low complexity
oracle
6.1
2016-10-25 CVE-2016-5540 7PK - Security Features vulnerability in Oracle Micros Xstore Payment 1.0
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
high complexity
oracle CWE-254
6.7
2016-10-25 CVE-2016-5538 Unspecified vulnerability in Oracle VM Virtualbox 5.0.27/5.1.7
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.
local
low complexity
oracle
6.7
2016-10-25 CVE-2016-5537 Unspecified vulnerability in Oracle Netbeans 8.1
Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
local
low complexity
oracle
5.7
2016-10-25 CVE-2016-5534 Improper Access Control vulnerability in Oracle Siebel User Interface Framework 16.1
Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.
network
low complexity
oracle CWE-284
6.5
2016-10-25 CVE-2016-5533 Improper Access Control vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
network
low complexity
oracle CWE-284
5.4