deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5515
Published: 2013-10-13
Description: The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12), 9.0.x before 9.0(2.6), and 9.1.x before 9.1(1.7) allows remote attackers to cause a denial of service (device reload) via crafted HTTPS requests, aka Bug ID CSCua22709.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5515; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa
CVE: CVE-2012-4076
Published: 2013-10-14
Description: Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98126; http://secunia.com/advisories/55205; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4076
CVE: CVE-2012-4077
Published: 2013-10-14
Description: Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/98127; http://secunia.com/advisories/55191; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4077
CVE: CVE-2012-4097
Published: 2013-10-14
Description: The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message, aka Bug ID CSCtn13043.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98128; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4097; http://osvdb.org/98128
CVE: CVE-2012-4099
Published: 2013-10-14
Description: The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13065.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98130; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4099; http://osvdb.org/98130
CVE: CVE-2012-4121
Published: 2013-10-14
Description: Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed (1) r and (2) w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4121; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4121
CVE: CVE-2013-5913
Published: 2013-10-15
Description: Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/98235; http://secunia.com/advisories/55193; http://wiki.oxidforge.org/Security_bulletins/2013-001
CVE: CVE-2013-4830
Published: 2013-10-16
Description: HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916; http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916
CVE: CVE-2013-4831
Published: 2013-10-16
Description: HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916; http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916
CVE: CVE-2013-4832
Published: 2013-10-16
Description: HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916; http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916
CVE: CVE-2013-4833
Published: 2013-10-16
Description: Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916; http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916
CVE: CVE-2013-5030
Published: 2013-10-16
Description: Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access certain configuration/ and maintenance/ scripts, by constructing a crafted URI after receiving an authentication error for an arbitrary login attempt.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/742932; http://www.kb.cert.org/vuls/id/742932
CVE: CVE-2013-5208
Published: 2013-10-16
Description: HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/829574; http://www.kb.cert.org/vuls/id/829574
CVE: CVE-2013-5390
Published: 2013-10-16
Description: Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439; http://www-01.ibm.com/support/docview.wss?uid=swg21652630; https://exchange.xforce.ibmcloud.com/vulnerabilities/87126
CVE: CVE-2013-5393
Published: 2013-10-16
Description: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439; http://www-01.ibm.com/support/docview.wss?uid=swg21652630; https://exchange.xforce.ibmcloud.com/vulnerabilities/87153
CVE: CVE-2013-5394
Published: 2013-10-16
Description: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439; http://www-01.ibm.com/support/docview.wss?uid=swg21652630; https://exchange.xforce.ibmcloud.com/vulnerabilities/87154
CVE: CVE-2013-5529
Published: 2013-10-16
Description: The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deployment interruption) via a direct request, aka Bug ID CSCuf52200.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5529; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5529
CVE: CVE-2013-5535
Published: 2013-10-16
Description: The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-255
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535
CVE: CVE-2013-5538
Published: 2013-10-16
Description: The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5538; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5538
CVE: CVE-2013-5539
Published: 2013-10-16
Description: The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539
CVE: CVE-2013-5540
Published: 2013-10-16
Description: The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many files, aka Bug ID CSCui67519.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5540; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5540
CVE: CVE-2013-5541
Published: 2013-10-16
Description: Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5541; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5541
CVE: CVE-2013-3762
Published: 2013-10-16
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2, 12.1.0.3, and 12.1.0.4 allows remote attackers to affect integrity via unknown vectors related to Schema Management.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/55322; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://secunia.com/advisories/55322
CVE: CVE-2013-3766
Published: 2013-10-16
Description: Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.1, 8.2, and 8.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Access.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3785
Published: 2013-10-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Career's Home.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3792
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0.20, 4.1.28, and 4.2.18 allows local users to affect availability via unknown vectors related to Core.
CVSS Score: 3.8 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3814
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3826
Published: 2013-10-16
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/55322; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18671
CVE: CVE-2013-3827
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2014-0029.html; http://www.kb.cert.org/vuls/id/526012; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3828
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 10.1.3.5.0 and 11.1.1.6.0 allows remote attackers to affect confidentiality via unknown vectors related to Test Page.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1029190; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3829
Published: 2013-10-16
Description: Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
CVE: CVE-2013-3831
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1029190; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3832
Published: 2013-10-16
Description: Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3833
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 and 11.1.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Authentication Engine.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1029190; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3834
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3835
Published: 2013-10-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3836
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Web Cache component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to ESI/Partial Page Caching.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1029190; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3837
Published: 2013-10-16
Description: Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows remote attackers to affect availability via unknown vectors related to Cacao.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19496; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3838
Published: 2013-10-16
Description: Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5 allows local users to affect availability via unknown vectors related to Sun System Firmware/Hypervisor.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3839
Published: 2013-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2014-0173.html; http://rhn.redhat.com/errata/RHSA-2014-0186.html; http://rhn.redhat.com/errata/RHSA-2014-0189.html
CVE: CVE-2013-3840
Published: 2013-10-16
Description: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3841
Published: 2013-10-16
Description: Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-3842
Published: 2013-10-16
Description: Unspecified vulnerability Oracle Solaris 10 allows local users to affect confidentiality via vectors related to Oracle Configuration Manager (OCM).
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19380; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-5761
Published: 2013-10-16
Description: Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Integration - Scripting.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-5762
Published: 2013-10-16
Description: Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration.
CVSS Score: 2.4 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-5765
Published: 2013-10-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via vectors related to XML Publisher.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2013-5766
Published: 2013-10-16
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 allows remote attackers to affect integrity via unknown vectors related to DB Performance Advisories/UIs.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/55322; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://secunia.com/advisories/55322
CVE: CVE-2013-5767
Published: 2013-10-16
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-201409-04.xml; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/63113
CVE: CVE-2013-5768
Published: 2013-10-16
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to ActiveX Controls.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html