Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3271 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:37:08.354Z Vendors: Oracle Products: Outside In Technology Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L Description: Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology ac
lnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score m
eived over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS v3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95532 - http://www.securitytracker.com/id/1037631 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3272 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:36:53.575Z Vendors: Oracle Products: Java SE, Java SE Embedded Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Description: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in
ed. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by
does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2017-0338.html - http://www.debian.org/security/2017/dsa-3782 - http://rhn.redhat.com/errata/RHSA-2017-0176.html - https://security.gentoo.org/glsa/201701-65 - http://rhn.redhat.com/errata/RHSA-2017-0180.html - http://www.securityfocus.com/bid/95533 - http://www.securitytracker.com/id/1037637 - https://security.gentoo.org/glsa/201707-01 - http://rhn.redha
om/bid/95533 - http://www.securitytracker.com/id/1037637 - https://security.gentoo.org/glsa/201707-01 - http://rhn.redhat.com/errata/RHSA-2017-0175.html - http://rhn.redhat.com/errata/RHSA-2017-0177.html - http://rhn.redhat.com/errata/RHSA-2017-0263.html - https://access.redhat.com/errata/RHSA-2017:1216 - https://security.netapp.com/advisory/ntap-20170119-0001/ - http://rhn.redhat.com/errata/RHSA-2017-0269.html - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://rhn.redhat.com/errata/RHSA-2017-0337.html - http://rhn.redhat.com/errata/RHSA-2017-0336.html
CVE ID: CVE-2017-3273 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:36:25.726Z Vendors: Oracle Products: MySQL Server Problem Types: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base S
in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - https://security.gentoo.org/glsa/201702-17 - http://www.securityfocus.com/bid/95583 - http://www.securitytracker.com/id/1037640 - https://access.redhat.com/errata/RHSA-2017:2886 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3274 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:36:06.961Z Vendors: Oracle Products: Email Center Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, at
equire human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95591 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technet
es: - http://www.securityfocus.com/bid/95591 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3275 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:35:54.800Z Vendors: Oracle Products: Email Center Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, at
equire human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95593 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technet
es: - http://www.securityfocus.com/bid/95593 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3276 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:35:39.482Z Vendors: Oracle Products: Solaris Operating System Problem Types: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H Description: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris
this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS v3.0 Base Score 5.7 (Integrity and Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95544 - http://www.securitytracker.com/id/1037641 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3277 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:35:32.611Z Vendors: Oracle Products: Applications Manager Problem Types: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Description: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: OAM Client). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application
ks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS v3.0 Base Score 4.9 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95617 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3278 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:35:24.943Z Vendors: Oracle Products: One-to-One Fulfillment Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attack
nteraction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95600 - http://www.securitytracker.com/id/1037639 - http://www.or
chment: References: - http://www.securityfocus.com/bid/95600 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3279 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:35:16.321Z Vendors: Oracle Products: Leads Management Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Leads Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Leads Management, attacks may signif
tion from a person other than the attacker and while the vulnerability is in Oracle Leads Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Leads Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Leads Management accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95614 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/sec
tp://www.securityfocus.com/bid/95614 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3280 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T20:10:45.134Z Vendors: Oracle Products: Partner Management Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracl
ccessful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.securityfocus.com/bid/95577
CVE ID: CVE-2017-3281 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:38:00.244Z Vendors: Oracle Products: Partner Management Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracl
ccessful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.securityfocus.com/bid/95582
CVE ID: CVE-2017-3282 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:37:51.996Z Vendors: Oracle Products: Partner Management Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracl
ccessful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95586 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3283 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:37:43.367Z Vendors: Oracle Products: Partner Management Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracl
ccessful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95587 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3284 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:37:33.767Z Vendors: Oracle Products: Service Fulfillment Manager Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while th
ice Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Fulfillment Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Fulfillment Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Service Fulfillment Manager accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytrack
cts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037639 - http://www.securityfocus.com/bid/95613 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3285 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:37:26.451Z Vendors: Oracle Products: Service Fulfillment Manager Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Description: Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while th
ice Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Service Fulfillment Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Fulfillment Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Service Fulfillment Manager accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus
cts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95615 - http://www.securitytracker.com/id/1037639 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3286 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-08T20:37:19.787Z Vendors: Oracle Products: Applications DBA Problem Types: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N Description: Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification acce