Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2014-04-16 CVE-2014-2411 Remote Security vulnerability in Oracle Identity Analytics
Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security.
network
low complexity
oracle
6.5
2014-04-16 CVE-2014-2409 Unspecified vulnerability in Oracle JDK and JRE
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
network
low complexity
oracle
6.4
2014-04-16 CVE-2014-2408 Remote Security vulnerability in Oracle Database
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."
network
high complexity
oracle
6.6
2014-04-16 CVE-2014-2407 Remote Code Execution vulnerability in Oracle Fusion Middleware 11.1.1.3.0
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416, CVE-2014-2417, and CVE-2014-2418.
network
low complexity
oracle
5.0
2014-04-16 CVE-2014-2404 Remote Security vulnerability in Oracle Access Manager
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.
network
low complexity
oracle
4.0
2014-04-16 CVE-2014-2403 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
network
low complexity
canonical oracle debian
5.0
2014-04-16 CVE-2014-2401 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
network
low complexity
oracle ibm
5.0
2014-04-16 CVE-2014-2400 Cross-Site Scripting vulnerability in Oracle Fusion Middleware 2.2.2
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2399.
network
oracle
4.3
2014-04-16 CVE-2014-2399 Cross-Site Request Forgery vulnerability in Oracle Fusion Middleware 2.2.2
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.
network
oracle
4.3
2014-04-16 CVE-2014-0464 Unspecified vulnerability in Oracle JDK and JRE
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.
network
oracle
4.3