deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-4964
Published: 2014-07-15
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication of users for requests that (1) modify customer settings or hijack the authentication of administrators for requests that change (2) customer passwords, (3) shop configuration, or (4) product details, as demonstrated by (5) modify a product's price via a crafted request to central/catalog/saveproduct.action or (6) creating a product review via a crafted request to shop/product/createReview.action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2014/Jul/38; http://www.securityfocus.com/archive/1/532726/100/0/threaded; http://seclists.org/fulldisclosure/2014/Jul/38
CVE: CVE-2014-4965
Published: 2014-07-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) customername parameter to central/orders/searchcriteria.action; (2) productname, (3) availability, or (4) status parameter to central/catalog/productlist.action; or unspecified vectors in (5) WebContent/orders/orderlist.jsp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Jul/38; http://www.securityfocus.com/archive/1/532726/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/94465
CVE: CVE-2014-2605
Published: 2014-07-16
Description: Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/68538; http://www.securitytracker.com/id/1030567; https://exchange.xforce.ibmcloud.com/vulnerabilities/94495
CVE: CVE-2014-2606
Published: 2014-07-16
Description: Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote authenticated users to gain privileges via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://www.securityfocus.com/bid/68542; http://www.securitytracker.com/id/1030567; https://exchange.xforce.ibmcloud.com/vulnerabilities/94496
CVE: CVE-2014-2618
Published: 2014-07-16
Description: Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2080.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/68540; http://www.securitytracker.com/id/1030568; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04369484
CVE: CVE-2014-2619
Published: 2014-07-16
Description: Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2088.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/68543; http://www.securitytracker.com/id/1030568; https://exchange.xforce.ibmcloud.com/vulnerabilities/94489
CVE: CVE-2014-2620
Published: 2014-07-16
Description: Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/68544; http://www.securitytracker.com/id/1030568; https://exchange.xforce.ibmcloud.com/vulnerabilities/94490
CVE: CVE-2014-2621
Published: 2014-07-16
Description: Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2090.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/68546; http://www.securitytracker.com/id/1030568; https://exchange.xforce.ibmcloud.com/vulnerabilities/94491
CVE: CVE-2014-2622
Published: 2014-07-16
Description: Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312.
CVSS Score: 8.5 (HIGH)
References: http://www.securityfocus.com/bid/68547; http://www.securitytracker.com/id/1030568; https://exchange.xforce.ibmcloud.com/vulnerabilities/94492
CVE: CVE-2013-5755
Published: 2014-07-16
Description: config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.exploit-db.com/exploits/33739; http://www.exploit-db.com/exploits/33739
CVE: CVE-2014-3427
Published: 2014-07-16
Description: CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.
CVSS Score: 5.0 (MEDIUM)
References: http://packetstormsecurity.com/files/127081/Yealink-VoIP-Phones-XSS-CRLF-Injection.html; http://seclists.org/fulldisclosure/2014/Jun/74; http://www.securityfocus.com/archive/1/532410/100/0/threaded
CVE: CVE-2014-3777
Published: 2014-07-16
Description: Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/127280/Reportico-Admin-Credential-Leak.html; http://seclists.org/fulldisclosure/2014/Jun/144; http://www.osvdb.org/108612
CVE: CVE-2014-4018
Published: 2014-07-16
Description: The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html; http://www.exploit-db.com/exploits/33803; https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities/
CVE: CVE-2014-4154
Published: 2014-07-16
Description: ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html; http://www.exploit-db.com/exploits/33803; https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities/
CVE: CVE-2014-4346
Published: 2014-07-16
Description: Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Jul/77; http://secunia.com/advisories/59942; http://support.citrix.com/article/CTX140863
CVE: CVE-2014-4347
Published: 2014-07-16
Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive information via vectors related to a cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2014/Jul/77; http://secunia.com/advisories/59942; http://support.citrix.com/article/CTX140863
CVE: CVE-2014-4976
Published: 2014-07-16
Description: Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Jul/44; http://www.securityfocus.com/bid/68495
CVE: CVE-2014-4977
Published: 2014-07-16
Description: Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit function, (3) methodDetail parameter in the methodDetail function, or (4) xcNetworkDetail parameter in the xcNetworkDetail function in d4d/exporters.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html; http://packetstormsecurity.com/files/137098/Dell-SonicWALL-Scrutinizer-11.01-methodDetail-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Jul/44
CVE: CVE-2013-5855
Published: 2014-07-17
Description: Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/ba-p/6368011#.U8ccVPlXZHU; http://rhn.redhat.com/errata/RHSA-2015-0675.html; http://rhn.redhat.com/errata/RHSA-2015-0720.html
CVE: CVE-2014-0436
Published: 2014-07-17
Description: Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2456
Published: 2014-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise ELS Enterprise Learning Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2477
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486.
CVSS Score: 3.6 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.exploit-db.com/exploits/34333; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2014-2479
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.
CVSS Score: 6.8 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2480
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481.
CVSS Score: 6.8 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2481
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480.
CVSS Score: 6.8 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2482
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle Concurrent Processing component in Oracle E-Business Suite 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2483
Published: 2014-07-17
Description: Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."
CVSS Score: 9.3 (HIGH)
References: http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/848481af9003; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://seclists.org/fulldisclosure/2014/Dec/23
CVE: CVE-2014-2484
Published: 2014-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html; http://seclists.org/fulldisclosure/2014/Dec/23; http://secunia.com/advisories/60425
CVE: CVE-2014-2485
Published: 2014-07-17
Description: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services.
CVSS Score: 1.4 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2486
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2477.
CVSS Score: 3.0 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2487
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-4261.
CVSS Score: 6.9 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2488
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.
CVSS Score: 1.0 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2489
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
CVSS Score: 4.1 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2490
Published: 2014-07-17
Description: Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://seclists.org/fulldisclosure/2014/Dec/23; http://secunia.com/advisories/60129
CVE: CVE-2014-2491
Published: 2014-07-17
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2492
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Web client (PC).
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2493
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces.
CVSS Score: 6.4 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2494
Published: 2014-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html; http://seclists.org/fulldisclosure/2014/Dec/23
CVE: CVE-2014-2495
Published: 2014-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing.
CVSS Score: 2.3 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-2496
Published: 2014-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Test Framework.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-4201
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-4202
Published: 2014-07-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-4203
Published: 2014-07-17
Description: Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing.
CVSS Score: 4.1 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://secunia.com/advisories/59268; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2014-4204
Published: 2014-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.
CVSS Score: 3.5 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-4205
Published: 2014-07-17
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded
CVE: CVE-2014-4206
Published: 2014-07-17
Description: Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect integrity and availability via unknown vectors related to Data Synchronizer.
CVSS Score: 3.3 (LOW)
References: http://seclists.org/fulldisclosure/2014/Dec/23; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/534161/100/0/threaded