deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-5154
Published: 2013-01-15
Description: Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=164490
CVE: CVE-2012-5155
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 on Mac OS X does not use an appropriate sandboxing approach for worker processes, which makes it easier for remote attackers to bypass intended access restrictions via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=163208; http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE: CVE-2012-5156
Published: 2013-01-15
Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF fields.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=162778; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16330
CVE: CVE-2012-5157
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=162156; https://code.google.com/p/chromium/issues/detail?id=162776
CVE: CVE-2013-0828
Published: 2013-01-15
Description: The PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an unspecified variable during processing of the root of the structure tree, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=162153; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16272
CVE: CVE-2013-0829
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 does not properly maintain database metadata, which allows remote attackers to bypass intended file-access restrictions via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=162114; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16322
CVE: CVE-2013-0830
Published: 2013-01-15
Description: The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=162066
CVE: CVE-2013-0831
Published: 2013-01-15
Description: Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=161836
CVE: CVE-2013-0832
Published: 2013-01-15
Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=160380
CVE: CVE-2013-0833
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=154485
CVE: CVE-2013-0834
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=154283
CVE: CVE-2013-0835
Published: 2013-01-15
Description: Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=152921
CVE: CVE-2013-0836
Published: 2013-01-15
Description: Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=150545
CVE: CVE-2013-0837
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=145363
CVE: CVE-2013-0838
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=143859
CVE: CVE-2013-0632
Published: 2013-01-17
Description: administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-276
References: http://www.adobe.com/support/security/advisories/apsa13-01.html; http://www.adobe.com/support/security/bulletins/apsb13-03.html; http://www.exploit-db.com/exploits/30210
CVE: CVE-2012-0569
Published: 2013-01-17
Description: Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Install/smpatch.
CVSS Score: 3.3 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE: CVE-2012-0572
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0219.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-0574
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9176&w=2; http://rhn.redhat.com/errata/RHSA-2013-0219.html; http://secunia.com/advisories/53372
CVE: CVE-2012-0578
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1677
Published: 2013-01-17
Description: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1678
Published: 2013-01-17
Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98, 9.1, and 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1680
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Apps - Multi-channel Technologies.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1700
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel UI Framework.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1701
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Highly Interactive Web UI.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1702
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0219.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-1705
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0219.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2012-1755
Published: 2013-01-17
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote attackers to affect integrity via vectors related to PeopleBooks - PSOL.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3168
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Core - Server Infrastructure.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3169
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to Siebel Core - Server Infrastructure, a different vulnerability than CVE-2012-3170.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3170
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to Siebel Core - Server Infrastructure, a different vulnerability than CVE-2012-3169.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3172
Published: 2013-01-17
Description: Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Apps - Multi-channel Technologies.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3178
Published: 2013-01-17
Description: Unspecified vulnerability in the kernel in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3190
Published: 2013-01-17
Description: Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity, related to UWQ Server Issues.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://secunia.com/advisories/57126; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3192
Published: 2013-01-17
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect integrity, related to Rich Text Editor (RTE).
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3218
Published: 2013-01-17
Description: Unspecified vulnerability in the Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security Groups.
CVSS Score: 5.5 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3219
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Storage Management.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://secunia.com/advisories/57126; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3220
Published: 2013-01-17
Description: Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17022
CVE: CVE-2012-5059
Published: 2013-01-17
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-0392.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-5060
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-5062
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-5096
Published: 2013-01-17
Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privileges to affect availability via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-5097
Published: 2013-01-17
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3.0, 11.1.1.5.0, and 11.1.2.0.0 allows remote attackers to affect integrity, related to OAM Webgate.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-0352
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://secunia.com/advisories/57126; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-0353
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-0354
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://secunia.com/advisories/57126; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-0355
Published: 2013-01-17
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150