deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0108
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0095.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0518
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1685
Published: 2012-10-16
Description: Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 allows remote attackers to affect integrity via unknown vectors related to Core.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id?1027666
CVE: CVE-2012-1686
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.6 and other versions allows remote attackers to affect integrity via unknown vectors related to Installation.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1751
Published: 2012-10-16
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to flashback archive.
CVSS Score: 6.5 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1763
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to HTML Surround.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id?1027675
CVE: CVE-2012-3138
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3139
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3140
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management.
CVSS Score: 5.5 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3141
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability than CVE-2012-3227.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/51005; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3142
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.5, 5.1.0, 5.2.0, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality, related to BASE.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51019; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3144
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/51177; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3145
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, and 6.2.0 allows local users to affect confidentiality, related to BASE.
CVSS Score: 1.5 (LOW)
References: http://secunia.com/advisories/51019; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3146
Published: 2012-10-16
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/86387; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3147
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/51177; http://www.mandriva.com/security/advisories?name=MDVSA-2013:102; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3148
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3149
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect confidentiality, related to MySQL Client.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51177; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3150
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3151
Published: 2012-10-16
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Unix and Linux platforms, allows local users to affect integrity and availability via unknown vectors.
CVSS Score: 3.3 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3152
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component.  NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the URLPARAMETER functionality allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlier versions.  NOTE: this can be leveraged with CVE-2012-3153 to execute arbitrary code by uploading a .jsp file.
CVSS Score: 9.1 (CRITICAL)
References: http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/; http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/; http://seclists.org/fulldisclosure/2014/Jan/186
CVE: CVE-2012-3153
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet.  NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions.  NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file.
CVSS Score: 6.4 (MEDIUM)
References: http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/; http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/; http://seclists.org/fulldisclosure/2014/Jan/186
CVE: CVE-2012-3154
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/50998; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3155
Published: 2012-10-16
Description: Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/56073
CVE: CVE-2012-3156
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51177; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3157
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, 6.2.0, and 12 allows remote authenticated users to affect integrity, related to BASE.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51019; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3158
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3160
Published: 2012-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.
CVSS Score: 2.1 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3161
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS).
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/50998; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3162
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows local users to affect confidentiality, related to MDS loading.
CVSS Score: 1.7 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3163
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
CVSS Score: 9.0 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3164
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Publish Item.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3165
Published: 2012-10-17
Description: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality and integrity via unknown vectors related to mailx.
CVSS Score: 3.6 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3166
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3167
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
CVSS Score: 3.5 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3171
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Autoconfig Templates.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3173
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3175
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3176
Published: 2012-10-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Panel Processor.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51001; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3177
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.
CVSS Score: 6.8 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3179
Published: 2012-10-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Tree Manager.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/51001; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3180
Published: 2012-10-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51177; http://secunia.com/advisories/51309
CVE: CVE-2012-3181
Published: 2012-10-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect availability via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/51001; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3182
Published: 2012-10-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity, related to PIA Core Technology.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/51001; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2012-3183
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3185 and CVE-2012-3186.
CVSS Score: 4.9 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3184
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-3185
Published: 2012-10-17
Description: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3186.
CVSS Score: 4.9 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150