Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5508 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:44:34.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037048 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93731
CVE ID: CVE-2016-5509 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T20:05:00.577Z Vendors: Oracle Products: FLEXCUBE Investor Servicing Problem Types: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Description: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXC
r Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95519 - http://www.securitytracker.com/id/1037636 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2016-5510 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:44:17.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93669 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5511 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:44:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93683 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037051
CVE ID: CVE-2016-5512 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:43:56.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93660 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5513 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:43:44.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93673
CVE ID: CVE-2016-5514 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:43:33.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93644 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5515 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:43:17.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93645 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5516 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:43:05.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93626 - http://www.securitytracker.com/id/1037035
CVE ID: CVE-2016-5517 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:42:53.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 allows local users to affect confidentiality via vectors related to AD Utilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037038 - http://www.securityfocus.com/bid/93769
CVE ID: CVE-2016-5518 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:42:17.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93647 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5519 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:41:49.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93698 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037055
CVE ID: CVE-2016-5520 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5521 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:32:48.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93655 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5522 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:39:45.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93675
CVE ID: CVE-2016-5523 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:32:13.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93625
CVE ID: CVE-2016-5524 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:32:05.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93671
CVE ID: CVE-2016-5525 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:31:57.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect integrity via vectors related to Cluster check files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037048 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93753
CVE ID: CVE-2016-5526 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:31:48.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93652
CVE ID: CVE-2016-5527 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:31:35.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93665
CVE ID: CVE-2016-5528 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T20:04:51.630Z Vendors: Oracle Products: GlassFish Server Problem Types: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability ca
acle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.securityfocus.com/bid/95478
CVE ID: CVE-2016-5529 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:32:24.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5530 and CVE-2016-8293. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037046 - http://www.securityfocus.com
ork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037046 - http://www.securityfocus.com/bid/93700
CVE ID: CVE-2016-5530 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:31:12.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-8293. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93706 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/
id/93706 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037046
CVE ID: CVE-2016-5531 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:31:05.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037052 - http://www.securityfocus.com/bid/93730
CVE ID: CVE-2016-5532 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:30:56.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93758 - http://www.securitytracker.com/id/1037038
CVE ID: CVE-2016-5533 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:30:49.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93676 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5534 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:29:28.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93757
CVE ID: CVE-2016-5535 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:29:17.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037052 - http://www.securityfocus.com/bid/93692 - https://www.tenable.com/security/research/
www.securitytracker.com/id/1037052 - http://www.securityfocus.com/bid/93692 - https://www.tenable.com/security/research/tra-2016-33
CVE ID: CVE-2016-5536 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:29:07.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-8281. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93772 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytrac
us.com/bid/93772 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037051
CVE ID: CVE-2016-5537 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:28:50.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project. Addi
y files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.exploit-db.com/exploits/40588/ - http://www.securityfocus.com/archive/1/539615/100/0/threaded - http://www.securityfocus.com/bid/93686 - http://hyp3rlinx.altervista.org/advisories/ORACLE-NETBEANS-IDE-DIRECTORY-TRAVERSAL.txt - http://www.securitytracker.com/id/1037051 - http://packetstormsecurity.com/files/139259/Oracle-Netbeans-IDE-8.1-Directory-Traversal.html
CVE ID: CVE-2016-5538 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:28:34.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93697 - http://www.securitytracker.com/id/1037053
CVE ID: CVE-2016-5539 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:28:21.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93663
CVE ID: CVE-2016-5540 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:28:13.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93657
CVE ID: CVE-2016-5541 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T20:04:41.865Z Vendors: Oracle Products: MySQL Cluster Problem Types: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Description: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.26 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data
this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS v3.0 Base Score 4.8 (Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/NicolasLemonias/status/821954512168648705 - http://www.securitytracker.com/id/1037640 - http://www.securityfocus.com/bid/95592 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - https://www.docdroid.net/o2uVeg4/cve2016554.pdf.html