deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-2866
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2867
Published: 2014-04-15
Description: Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2868
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2869
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2870
Published: 2014-04-15
Description: The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2871
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2872
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive information from a directory listing via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2873
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2014-2874
Published: 2014-04-15
Description: PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unspecified context.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.kb.cert.org/vuls/id/437385; http://www.kb.cert.org/vuls/id/437385
CVE: CVE-2008-3277
Published: 2014-04-15
Description: Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-22
References: http://rhn.redhat.com/errata/RHSA-2012-0311.html; https://bugzilla.redhat.com/show_bug.cgi?id=457935; http://rhn.redhat.com/errata/RHSA-2012-0311.html
CVE: CVE-2010-2236
Published: 2014-04-15
Description: The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/56952; https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff; https://bugzilla.redhat.com/show_bug.cgi?id=607712
CVE: CVE-2011-3628
Published: 2014-04-15
Description: Untrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.04 LTS, when using certain configurations such as "session optional pam_motd.so", allows local users to gain privileges by modifying the PATH environment variable to reference a malicious command, as demonstrated via uname.
CVSS Score: 6.9 (MEDIUM)
References: http://www.ubuntu.com/usn/USN-1237-1; https://bugs.launchpad.net/ubuntu/%2Bsource/pam/%2Bbug/610125; http://www.ubuntu.com/usn/USN-1237-1
CVE: CVE-2012-0214
Published: 2014-04-15
Description: The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloading the new InRelease file, which leaves the original InRelease file active and makes it more difficult to detect that the Packages file is modified and unsigned.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://anonscm.debian.org/gitweb/?p=apt/apt.git%3Ba=commitdiff%3Bh=b7a6594d1e5ed199a7a472b78b33e070375d6f92; http://anonscm.debian.org/gitweb/?p=apt/apt.git%3Ba=commitdiff%3Bh=de498a528cd6fc36c4bb22bf8dec6558e21cc9b6; http://www.ubuntu.com/usn/USN-1385-1
CVE: CVE-2013-6456
Published: 2014-04-15
Description: The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-59
References: http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=5fc590ad9f4; http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129199.html
CVE: CVE-2014-0053
Published: 2014-04-15
Description: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote attackers to obtain sensitive information via a direct request.  NOTE: this identifier has been SPLIT due to different researchers and different vulnerability types. See CVE-2014-2857 for the META-INF variant and CVE-2014-2858 for the directory traversal.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0194.html; http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html; http://secunia.com/advisories/56841
CVE: CVE-2014-2857
Published: 2014-04-15
Description: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the META-INF directory, which allows remote attackers to obtain sensitive information via a direct request.  NOTE: this issue was SPLIT from CVE-2014-0053 due to different researchers per ADT5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html; http://www.gopivotal.com/security/cve-2014-0053; http://www.securityfocus.com/archive/1/531281/100/0/threaded
CVE: CVE-2014-2858
Published: 2014-04-15
Description: Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html; http://www.gopivotal.com/security/cve-2014-0053; http://www.securityfocus.com/archive/1/531281/100/0/threaded
CVE: CVE-2013-4768
Published: 2014-04-16
Description: The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://www.eucalyptus.com/resources/security/advisories/esa-15; https://www.eucalyptus.com/resources/security/advisories/esa-15
CVE: CVE-2014-0384
Published: 2014-04-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2014-0522.html; http://rhn.redhat.com/errata/RHSA-2014-0536.html; http://rhn.redhat.com/errata/RHSA-2014-0537.html
CVE: CVE-2014-0413
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0414
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0421
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0426
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0429
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0432
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://security.gentoo.org/glsa/glsa-201502-12.xml; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0442
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter Utility.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0446
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0447
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2013-5876.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0448
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://security.gentoo.org/glsa/glsa-201502-12.xml; http://www-01.ibm.com/support/docview.wss?uid=swg21672080
CVE: CVE-2014-0449
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://security.gentoo.org/glsa/glsa-201502-12.xml
CVE: CVE-2014-0450
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-0451
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0452
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0453
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2
CVE: CVE-2014-0454
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html; http://secunia.com/advisories/58974
CVE: CVE-2014-0455
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html; http://secunia.com/advisories/58974
CVE: CVE-2014-0456
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 10.0 (HIGH)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2
CVE: CVE-2014-0457
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html; http://rhn.redhat.com/errata/RHSA-2014-0685.html
CVE: CVE-2014-0458
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0459
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html; http://secunia.com/advisories/58415
CVE: CVE-2014-0460
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
CVSS Score: 5.8 (MEDIUM)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2
CVE: CVE-2014-0461
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-0463
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.
CVSS Score: 4.3 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-201502-12.xml; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/66908
CVE: CVE-2014-0464
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.
CVSS Score: 4.3 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-201502-12.xml; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/66913
CVE: CVE-2014-0465
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2014-2397
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html; http://rhn.redhat.com/errata/RHSA-2014-0685.html
CVE: CVE-2014-2398
Published: 2014-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
CVSS Score: 3.5 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2; http://rhn.redhat.com/errata/RHSA-2014-0675.html
CVE: CVE-2014-2399
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/127222/Endeca-Latitude-2.2.2-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2014/Jun/123; http://www.exploit-db.com/exploits/33897
CVE: CVE-2014-2400
Published: 2014-04-16
Description: Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2399.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/127223/Endeca-Latitude-2.2.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2014/Jun/124; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html