deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-0383
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0 and 11.1.2.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Identity Console.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102102; http://secunia.com/advisories/56459; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0385
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 7u45, when installing on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/101998; http://secunia.com/advisories/56485; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0386
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102069; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0387
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0388
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS Human Resources component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Org and Workforce Dev.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102040; http://secunia.com/advisories/56477; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0389
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/102109; http://secunia.com/advisories/56482; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0390
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Java Web Console.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/102052; http://secunia.com/advisories/56488; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0391
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102099; http://secunia.com/advisories/56459; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0392
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102039; http://secunia.com/advisories/56477; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0393
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to InnoDB.
CVSS Score: 3.3 (LOW)
References: http://osvdb.org/102075; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0394
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Updates Environment Mgmt, a different vulnerability than CVE-2014-0395.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102033; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0395
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Updates Environment Mgmt, a different vulnerability than CVE-2014-0394.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102034; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0396
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102031; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0398
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Discoverer.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102105; http://secunia.com/advisories/56471; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0399
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Data, Domain & Function Security.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102085; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2014-0400
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server.
CVSS Score: 6.3 (MEDIUM)
References: http://osvdb.org/102112; http://secunia.com/advisories/56460; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0401
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102071; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0402
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Locking.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102068; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0403
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0404
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.
CVSS Score: 2.4 (LOW)
References: http://osvdb.org/102061; http://secunia.com/advisories/56490; http://www.debian.org/security/2014/dsa-2878
CVE: CVE-2014-0405
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0407.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102059; http://secunia.com/advisories/56490; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0406
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0404.
CVSS Score: 2.4 (LOW)
References: http://osvdb.org/102060; http://secunia.com/advisories/56490; http://www.debian.org/security/2014/dsa-2878
CVE: CVE-2014-0407
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102058; http://secunia.com/advisories/56490; http://www.debian.org/security/2014/dsa-2878
CVE: CVE-2014-0408
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html; http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html; http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html
CVE: CVE-2014-0410
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0411
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.
CVSS Score: 4.0 (MEDIUM)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html
CVE: CVE-2014-0412
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102067; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0415
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0416
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
CVSS Score: 5.0 (MEDIUM)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html
CVE: CVE-2014-0417
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0418
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1889&w=2; http://osvdb.org/102012
CVE: CVE-2014-0419
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration Console and Workspace Web Applications.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/102110; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2014-0420
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.
CVSS Score: 2.8 (LOW)
References: http://osvdb.org/102077; http://rhn.redhat.com/errata/RHSA-2014-0173.html; http://rhn.redhat.com/errata/RHSA-2014-0186.html
CVE: CVE-2014-0422
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0423
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
CVSS Score: 5.5 (MEDIUM)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html
CVE: CVE-2014-0424
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html
CVE: CVE-2014-0425
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102044; http://secunia.com/advisories/56479; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0427
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via vectors related to FTS.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102072; http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE: CVE-2014-0428
Published: 2014-01-15
Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.
CVSS Score: 10.0 (HIGH)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html
CVE: CVE-2014-0430
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.
CVSS Score: 2.8 (LOW)
References: http://osvdb.org/102076; http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE: CVE-2014-0431
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102073; http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE: CVE-2014-0433
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote attackers to affect availability via unknown vectors related to Thread Pooling.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/56491; http://security.gentoo.org/glsa/glsa-201409-04.xml; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0434
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0, 6.1, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Installation.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/102084; http://secunia.com/advisories/56472; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0435
Published: 2014-01-15
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Function Security.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102086; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/64758
CVE: CVE-2014-0437
Published: 2014-01-15
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/102074; http://rhn.redhat.com/errata/RHSA-2014-0164.html; http://rhn.redhat.com/errata/RHSA-2014-0173.html
CVE: CVE-2014-0438
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Panel Processor.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102043; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0439
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Report Distribution.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102042; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-0440
Published: 2014-01-15
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect availability via vectors related to PIA Core Technology.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/102041; http://secunia.com/advisories/56478; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html