Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0382 State: PUBLISHED Published: 2017-05-03T17:00:00 Last Updated: 2024-08-05T22:15:24.167Z Vendors: IBM Corporation Products: Tealeaf Customer Experience Problem Types: Obtain Information Description: The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98301 - http://www.ibm.com/support/docview.wss?uid=swg22000590
CVE ID: CVE-2016-0385 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-05T22:15:24.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92505 - http://www.securitytracker.com/id/1036654 - http://www-01.ibm.com/support/docview.wss?uid=swg21982588 - http://www-01.ibm.com/sup
w.securitytracker.com/id/1036654 - http://www-01.ibm.com/support/docview.wss?uid=swg21982588 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI60026
CVE ID: CVE-2016-0386 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV83657
CVE ID: CVE-2016-0387 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981740
CVE ID: CVE-2016-0389 State: PUBLISHED Published: 2016-07-07T14:00:00 Last Updated: 2024-08-05T22:15:24.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982012 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052 - http://www.securityfocus.com/bid/91515
CVE ID: CVE-2016-0390 State: PUBLISHED Published: 2016-05-15T01:00:00 Last Updated: 2024-08-05T22:15:24.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21981321
CVE ID: CVE-2016-0391 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982615
CVE ID: CVE-2016-0392 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:15:24.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91082 - http://packetstormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html - http://www-01.ibm.com/support/docview.ws
stormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IV84206 - http://www.securitytracker.com/id/1036458 - http://www.securityfocus.com/archive/1/538620/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005875
CVE ID: CVE-2016-0393 State: PUBLISHED Published: 2016-07-17T22:00:00 Last Updated: 2024-08-05T22:15:24.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21986053 - http://www.securityfocus.com/bid/91744
CVE ID: CVE-2016-0394 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T22:15:24.379Z Vendors: IBM Corporation Products: Integration Bus Problem Types: File Manipulation Description: IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21985013 - http://www.securityfocus.com/bid/94577
CVE ID: CVE-2016-0396 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T22:15:24.354Z Vendors: IBM Corporation Products: BigFix Platform Problem Types: Gain Privileges Description: IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94155 - http://www.ibm.com/support/docview.wss?uid=swg21993206
CVE ID: CVE-2016-0397 State: PUBLISHED Published: 2016-08-30T17:00:00 Last Updated: 2024-08-05T22:15:24.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92467 - http://www-01.ibm.com/support/docview.wss?uid=swg21985907
CVE ID: CVE-2016-0398 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21977070
CVE ID: CVE-2016-0399 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984134
CVE ID: CVE-2016-0400 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T22:15:24.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI60897 - http://www-01.ibm.com/support/docview.wss?uid=swg21983036 - https://www.exploit-db.com/exploits/40039/ - http://www-01.ibm.com/support/docvi
m/support/docview.wss?uid=swg21983036 - https://www.exploit-db.com/exploits/40039/ - http://www-01.ibm.com/support/docview.wss?uid=swg1PI60898
CVE ID: CVE-2016-0401 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0402 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html - http://www.securityfocus.com/bid/81096 - http://www.securitytracker.com/id/1034715 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html - ht
p://www.securitytracker.com/id/1034715 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html - https://security.gentoo.org/glsa/201610-08 - http://www.ubuntu.com/usn/USN-2884-1 - http://www.debian.org/security/2016/dsa-3465 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2885-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://rhn.redhat.com/errata/RHSA-2016-0049.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html - http://rhn.redhat.com/errata/RHSA-2016-0053.html - http://lists.opensuse
nsuse-security-announce/2016-01/msg00045.html - http://rhn.redhat.com/errata/RHSA-2016-0053.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html - http://rhn.redhat.com/errata/RHSA-2016-0067.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html - https://security.gentoo.org/glsa/201603-14 - http://rhn.redhat.com/errata/RHSA-2016-0057.html - http://rhn.redhat.com/errata/RHSA-2016-0055.html - http://rhn.redhat.com/errata/RHSA-2016-0054.html - http://rhn.redhat.com/errata/RHSA-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.
ttp://rhn.redhat.com/errata/RHSA-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html - http://rhn.redhat.com/errata/RHSA-2016-0050.html - http://www.debian.org/security/2016/dsa-3458 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
CVE ID: CVE-2016-0403 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0404 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0405 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4 allows local users to affect confidentiality via vectors related to Cluster Manageability and Serviceability. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0406 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0407 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:23:02.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035610 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0408 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:22:51.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035610 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0409 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Security. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034720
CVE ID: CVE-2016-0410 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0411 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1 and 11.2.0.4 allows local users to affect confidentiality, integrity, and availability via vectors related to Agent Next Gen. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0412 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Manage Requisition Status. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034720
CVE ID: CVE-2016-0413 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0414 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0418. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0415 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to UI Framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0416 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to System Archive Utility. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0417 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.2 allows local users to affect confidentiality, integrity, and availability via vectors related to HA for MySQL. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0418 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0414. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0419 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0431. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0420 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/126 - http://www.securitytracker.com/id/1034722 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-server-mana
rk/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-create-user - http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html
CVE ID: CVE-2016-0421 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034722 - http://packetstormsecurity.com/files/138508/JD-Edwards-9.1-EnterpriseOne-Server-Manager-Shutdown.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/r
er-Shutdown.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-shutdown - http://seclists.org/fulldisclosure/2016/Aug/125
CVE ID: CVE-2016-0422 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034722 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disc
/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disclosure - http://seclists.org/fulldisclosure/2016/Aug/124 - http://packetstormsecurity.com/files/138507/JD-Edwards-9.1-EnterpriseOne-Server-JDENet-Password-Disclosure.html