Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0423 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034722 - http://packetstormsecurity.com/files/138512/JD-Edwards-9.1-EnterpriseOne-Server-JDENET-Denial-Of-Service.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2
-9.1-EnterpriseOne-Server-JDENET-Denial-Of-Service.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-end-file-dos - http://seclists.org/fulldisclosure/2016/Aug/128
CVE ID: CVE-2016-0424 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034722 - http://packetstormsecurity.com/files/138510/JD-Edwards-9.1-EnterpriseOne-Server-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2016/Aug/127 - https
510/JD-Edwards-9.1-EnterpriseOne-Server-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2016/Aug/127 - https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-type-8-dos - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
CVE ID: CVE-2016-0425 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Monitoring and Diagnostics. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/129 - http://www.securitytracker.com/id/1034722 - http://packetstormsecurity.com/files/138511/JD-Edwards-9.1-EnterpriseOne-Server-Password-Disclosure.html - ht
/1034722 - http://packetstormsecurity.com/files/138511/JD-Edwards-9.1-EnterpriseOne-Server-Password-Disclosure.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
CVE ID: CVE-2016-0426 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality and availability via unknown vectors related to Solaris Kernel Zones. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0427 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0428 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Verified Boot. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0429 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0401. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0430 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0439. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0431 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0419. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0432 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6014, and CVE-2015-6015. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0433 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0434 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and CVE-2016-0438. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034718
CVE ID: CVE-2016-0435 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034718
CVE ID: CVE-2016-0436 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and CVE-2016-0438. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034718
CVE ID: CVE-2016-0437 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0438. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034718
CVE ID: CVE-2016-0438 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034718
CVE ID: CVE-2016-0439 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0430. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2016-0440 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to NFSv4. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034735
CVE ID: CVE-2016-0441 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:15:24.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034712 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
CVE ID: CVE-2016-0442 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0443 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality via unknown vectors related to Agent Next Gen. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0444 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0447 and CVE-2016-0449. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0445 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0446 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality via unknown vectors related to Agent Next Gen. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0447 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0449. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0448 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html - http://www.securitytracker.com/id/1034715 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html - https://security.gentoo.org/glsa/201610-0
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html - https://security.gentoo.org/glsa/201610-08 - http://www.ubuntu.com/usn/USN-2884-1 - http://www.debian.org/security/2016/dsa-3465 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2885-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://www.securityfocus.com/bid/81123 - http://rhn.redhat.com/errata/RHSA-2016-0049.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html - http://rhn.redhat.com/errata/RHSA-2016-0053.html - http://lists.opensu
pensuse-security-announce/2016-01/msg00045.html - http://rhn.redhat.com/errata/RHSA-2016-0053.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html - http://rhn.redhat.com/errata/RHSA-2016-0067.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html - https://security.gentoo.org/glsa/201603-14 - http://rhn.redhat.com/errata/RHSA-2016-0057.html - http://rhn.redhat.com/errata/RHSA-2016-0055.html - http://rhn.redhat.com/errata/RHSA-2016-0054.html - http://rhn.redhat.com/errata/RHSA-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg0004
http://rhn.redhat.com/errata/RHSA-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html - http://rhn.redhat.com/errata/RHSA-2016-0050.html - http://www.debian.org/security/2016/dsa-3458 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
CVE ID: CVE-2016-0449 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0447. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0450 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securityfocus.com/bid/81117 - https://redr2e.com/cve-to-poc-cve-2016-0450/ - http://www.zerodayinitiative.com/advisories/ZDI-16-021
CVE ID: CVE-2016-0451 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0452. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-022 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://redr2e.com/cve-to-poc-cve-2016-0451/ - http://www.securityfocus.com/bid/81125
CVE ID: CVE-2016-0452 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securityfocus.com/bid/81122 - http://www.zerodayinitiative.com/advisories/ZDI-16-023
CVE ID: CVE-2016-0453 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034712 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
CVE ID: CVE-2016-0454 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034726
CVE ID: CVE-2016-0455 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:54.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality and availability via unknown vectors related to Agent Next Gen. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034734
CVE ID: CVE-2016-0456 State: PUBLISHED Published: 2016-01-21T02:00:00 Last Updated: 2024-08-05T22:22:55.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-si
(XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/copxmllcmservicecontroller.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securitytracker.com/id/1034726 - https://erpscan.io/advisories/erpscan-16-006-oracle-e-business-suite-xxe-injection-vulnerability/