Vendor CVEs

Oracle Corporation

All CVEs

10,034 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-5570	Oracle Corporation Applications Dba	Med	0.42	6.5	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities.
CVE-2016-5567	Oracle Corporation Applications Dba	Med	0.42	6.5	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5571.
CVE-2016-5534	Oracle Corporation Siebel CRM	Med	0.42	6.5	0.01	Oct 25, 2016	Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5521	Oracle Corporation Supply Chain Products Suite	Med	0.42	6.5	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.
CVE-2016-5497	Oracle Corporation Database Server	Med	0.42	6.4	0.00	Oct 25, 2016	Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5404	Freeipa Freeipa	Med	0.42	6.5	0.03	Sep 7, 2016	The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVE-2016-5461	Oracle Corporation Siebel CRM	Med	0.42	6.5	0.02	Jul 21, 2016	Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
CVE-2016-5458	Oracle Corporation Communications Eagle Application Processor	Med	0.42	6.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.
CVE-2016-5454	Oracle Corporation Solaris	Med	0.42	6.4	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot.
CVE-2016-5448	Oracle Corporation Sun Systems Products Suite	Med	0.42	6.5	0.03	Jul 21, 2016	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.
CVE-2016-3572	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.42	6.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.
CVE-2016-3537	Oracle Corporation Agile Plm	Med	0.42	6.5	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473.
CVE-2016-3514	Oracle Corporation Enterprise Communications Broker	Med	0.42	6.5	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3516.
CVE-2016-3513	Oracle Corporation Communications Operations Monitor	Med	0.42	6.5	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to affect confidentiality via vectors related to Infrastructure.
CVE-2016-3502	Oracle Corporation Webcenter Sites	Med	0.42	6.5	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3494	Oracle Corporation Enterprise Manager Ops Center	Med	0.42	6.5	0.02	Jul 21, 2016	Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.
CVE-2016-3476	Oracle Corporation Knowledge	Med	0.42	6.5	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers to affect confidentiality and integrity via vectors related to Information Manager Console.
CVE-2016-2117	Linux Kernel	Hig	0.42	7.5	0.06	May 2, 2016	The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.
CVE-2016-3431	Oracle Corporation Agile Plm	Med	0.42	6.4	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-3420	Oracle Corporation Agile Plm	Med	0.42	6.4	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-0684	Oracle Corporation Retail MICROS ARS POS	Med	0.42	6.5	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.
CVE-2016-0407	Oracle Corporation Peoplesoft Enterprise Human Capital Management Human Resources	Med	0.42	6.5	0.02	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.
CVE-2015-7546	OpenStack Keystone	Hig	0.42	7.5	0.02	Feb 3, 2016	The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI…
CVE-2016-0502	MariaDB MariaDB	Med	0.42	6.5	0.03	Jan 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVE-2015-3238	Linux Pam Linux Pam	Med	0.42	6.5	0.03	Aug 24, 2015	The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
CVE-2014-3687	Linux Kernel	Hig	0.42	7.5	0.09	Nov 10, 2014	The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect…
CVE-2014-3673	Linux Kernel	Hig	0.42	7.5	0.07	Nov 10, 2014	The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.
CVE-2026-34323	Oracle Corporation Life Sciences Inform	Med	0.41	6.3	0.00	Apr 21, 2026	Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2024-20930	Oracle Corporation Outside In Technology	Med	0.41	6.3	0.00	Jan 16, 2024	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged…
CVE-2023-22127	Oracle Corporation Outside In Technology	Med	0.41	6.3	0.00	Oct 17, 2023	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged…
CVE-2023-21860	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.01	Jan 18, 2023	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations). Supported versions that are affected are 7.4.38 and prior, 7.5.28 and prior, 7.6.24 and prior and 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged…
CVE-2023-21829	Oracle Corporation Database Server	Med	0.41	6.3	0.00	Jan 18, 2023	Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to…
CVE-2022-2696	WordPress Restaurant Menu – Food Ordering System – Table Reservation	Med	0.41	6.3	0.01	Nov 3, 2022	The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to authorization bypass via several AJAX actions in versions up to, and including 2.3.0 due to missing capability checks and missing nonce validation. This makes it possible for…
CVE-2022-21483	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Apr 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21482	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Apr 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21380	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21356	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21337	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21336	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21335	Oracle Corporation MySQL	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21334	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21332	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21330	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the…
CVE-2022-21329	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21328	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21327	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21326	Oracle Corporation MySQL	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21322	Oracle Corporation MySQL	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21320	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.03	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21318	Oracle Corporation Mysql Cluster	Med	0.41	6.3	0.01	Jan 19, 2022	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where…

CVE-2016-5570MedOct 25, 2016
Oracle Corporation
Applications Dba
risk 0.42cvss 6.5epss 0.01
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities.
CVE-2016-5567MedOct 25, 2016
Oracle Corporation
Applications Dba
risk 0.42cvss 6.5epss 0.01
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5571.
CVE-2016-5534MedOct 25, 2016
Oracle Corporation
Siebel CRM
risk 0.42cvss 6.5epss 0.01
Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5521MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.42cvss 6.5epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.
CVE-2016-5497MedOct 25, 2016
Oracle Corporation
Database Server
risk 0.42cvss 6.4epss 0.00
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5404MedSep 7, 2016
Freeipa
Freeipa
risk 0.42cvss 6.5epss 0.03
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVE-2016-5461MedJul 21, 2016
Oracle Corporation
Siebel CRM
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
CVE-2016-5458MedJul 21, 2016
Oracle Corporation
Communications Eagle Application Processor
risk 0.42cvss 6.4epss 0.01
Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.
CVE-2016-5454MedJul 21, 2016
Oracle Corporation
Solaris
risk 0.42cvss 6.4epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot.
CVE-2016-5448MedJul 21, 2016
Oracle Corporation
Sun Systems Products Suite
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.
CVE-2016-3572MedJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.42cvss 6.4epss 0.01
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.
CVE-2016-3537MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473.
CVE-2016-3514MedJul 21, 2016
Oracle Corporation
Enterprise Communications Broker
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3516.
CVE-2016-3513MedJul 21, 2016
Oracle Corporation
Communications Operations Monitor
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to affect confidentiality via vectors related to Infrastructure.
CVE-2016-3502MedJul 21, 2016
Oracle Corporation
Webcenter Sites
risk 0.42cvss 6.5epss 0.01
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3494MedJul 21, 2016
Oracle Corporation
Enterprise Manager Ops Center
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.
CVE-2016-3476MedJul 21, 2016
Oracle Corporation
Knowledge
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers to affect confidentiality and integrity via vectors related to Information Manager Console.
CVE-2016-2117HigMay 2, 2016
Linux
Kernel
risk 0.42cvss 7.5epss 0.06
The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.
CVE-2016-3431MedApr 21, 2016
Oracle Corporation
Agile Plm
risk 0.42cvss 6.4epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-3420MedApr 21, 2016
Oracle Corporation
Agile Plm
risk 0.42cvss 6.4epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-0684MedApr 21, 2016
Oracle Corporation
Retail MICROS ARS POS
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.
CVE-2016-0407MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Human Capital Management Human Resources
risk 0.42cvss 6.5epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.
CVE-2015-7546HigFeb 3, 2016
OpenStack
Keystone
risk 0.42cvss 7.5epss 0.02
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI…
CVE-2016-0502MedJan 21, 2016
MariaDB
MariaDB
risk 0.42cvss 6.5epss 0.03
Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVE-2015-3238MedAug 24, 2015
Linux Pam
Linux Pam
risk 0.42cvss 6.5epss 0.03
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
CVE-2014-3687HigNov 10, 2014
Linux
Kernel
risk 0.42cvss 7.5epss 0.09
The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect…
CVE-2014-3673HigNov 10, 2014
Linux
Kernel
risk 0.42cvss 7.5epss 0.07
The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.
CVE-2026-34323MedApr 21, 2026
Oracle Corporation
Life Sciences Inform
risk 0.41cvss 6.3epss 0.00
Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2024-20930MedJan 16, 2024
Oracle Corporation
Outside In Technology
risk 0.41cvss 6.3epss 0.00
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged…
CVE-2023-22127MedOct 17, 2023
Oracle Corporation
Outside In Technology
risk 0.41cvss 6.3epss 0.00
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged…
CVE-2023-21860MedJan 18, 2023
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.01
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations). Supported versions that are affected are 7.4.38 and prior, 7.5.28 and prior, 7.6.24 and prior and 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged…
CVE-2023-21829MedJan 18, 2023
Oracle Corporation
Database Server
risk 0.41cvss 6.3epss 0.00
Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to…
CVE-2022-2696MedNov 3, 2022
WordPress
Restaurant Menu – Food Ordering System – Table Reservation
risk 0.41cvss 6.3epss 0.01
The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to authorization bypass via several AJAX actions in versions up to, and including 2.3.0 due to missing capability checks and missing nonce validation. This makes it possible for…
CVE-2022-21483MedApr 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21482MedApr 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21380MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21356MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21337MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21336MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21335MedJan 19, 2022
Oracle Corporation
MySQL
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21334MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21332MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21330MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the…
CVE-2022-21329MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21328MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21327MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21326MedJan 19, 2022
Oracle Corporation
MySQL
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…
CVE-2022-21322MedJan 19, 2022
Oracle Corporation
MySQL
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21320MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.03
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to…
CVE-2022-21318MedJan 19, 2022
Oracle Corporation
Mysql Cluster
risk 0.41cvss 6.3epss 0.01
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where…

Page 51 of 201