deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-6518
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to Unix File System (UFS).
CVSS Score: 6.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031583; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6521
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.
CVSS Score: 7.2 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031583; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6524
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
CVSS Score: 7.2 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031583; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6525
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6526
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6528
Published: 2015-01-21
Description: Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Server Infrastructure.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031578; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-3440
Published: 2015-01-21
Description: The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to upload a log file.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2015/May/39; http://www.securityfocus.com/bid/72091; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00
CVE: CVE-2014-6172
Published: 2015-01-21
Description: IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LI78291; http://www-01.ibm.com/support/docview.wss?uid=swg21694460; http://www.securitytracker.com/id/1031613
CVE: CVE-2014-7289
Published: 2015-01-21
Description: SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html; http://seclists.org/fulldisclosure/2015/Jan/91; http://www.securityfocus.com/archive/1/534527/100/0/threaded
CVE: CVE-2014-8913
Published: 2015-01-21
Description: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/62205; http://www-01.ibm.com/support/docview.wss?uid=swg1JR51742; http://www-01.ibm.com/support/docview.wss?uid=swg21693239
CVE: CVE-2014-8914
Published: 2015-01-21
Description: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8913.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/62205; http://www-01.ibm.com/support/docview.wss?uid=swg1JR51836; http://www-01.ibm.com/support/docview.wss?uid=swg1JR52103
CVE: CVE-2014-9224
Published: 2015-01-21
Description: Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html; http://seclists.org/fulldisclosure/2015/Jan/91; http://www.securityfocus.com/archive/1/534527/100/0/threaded
CVE: CVE-2014-9225
Published: 2015-01-21
Description: The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html; http://seclists.org/fulldisclosure/2015/Jan/91; http://www.securityfocus.com/archive/1/534527/100/0/threaded
CVE: CVE-2014-9226
Published: 2015-01-21
Description: The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html; http://seclists.org/fulldisclosure/2015/Jan/91; http://www.securityfocus.com/archive/1/534527/100/0/threaded
CVE: CVE-2014-9597
Published: 2015-01-21
Description: The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP violation and application crash) via a crafted FLV file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2015/Jan/72; http://www.binarysniper.net/2015/01/vlc-media-player-215-memory-corruption.html; https://security.gentoo.org/glsa/201603-08
CVE: CVE-2014-9598
Published: 2015-01-21
Description: The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (write access violation) via a crafted M2V file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2015/Jan/72; http://www.binarysniper.net/2015/01/vlc-media-player-215-memory-corruption.html; https://security.gentoo.org/glsa/201603-08
CVE: CVE-2015-0513
Published: 2015-01-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified fields.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html; http://www.securityfocus.com/bid/72259; http://www.securitytracker.com/id/1031567
CVE: CVE-2015-0514
Published: 2015-01-21
Description: EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html; http://packetstormsecurity.com/files/130910/EMC-M-R-Watch4net-Insecure-Credential-Storage.html; http://seclists.org/fulldisclosure/2015/Mar/112
CVE: CVE-2015-0515
Published: 2015-01-21
Description: Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.
CVSS Score: 6.5 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html; http://www.securityfocus.com/bid/72256; http://www.securitytracker.com/id/1031567
CVE: CVE-2015-0516
Published: 2015-01-21
Description: Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html; http://seclists.org/fulldisclosure/2015/Mar/116; http://www.securityfocus.com/archive/1/534929/100/0/threaded
CVE: CVE-2015-0867
Published: 2015-01-21
Description: Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN88559134/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000006; http://www.synck.com/blogs/news/weblog_[PII_REDACTED].html
CVE: CVE-2014-6541
Published: 2015-01-21
Description: Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality via vectors related to DBMS_IR.
CVSS Score: 6.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72158; http://www.securitytracker.com/id/1031572
CVE: CVE-2014-6548
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6549
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html; http://rhn.redhat.com/errata/RHSA-2015-0080.html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6556
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AD_DDL.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6565
Published: 2015-01-21
Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031573; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6566
Published: 2015-01-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031577; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6567
Published: 2015-01-21
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.
CVSS Score: 9.0 (HIGH)
References: http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdf; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72134
CVE: CVE-2014-6568
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.
CVSS Score: 3.5 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149929.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html; http://rhn.redhat.com/errata/RHSA-2015-0116.html
CVE: CVE-2014-6569
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6570
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6600 and CVE-2015-0397.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031583; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6571
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2011-1944.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6572
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to List of Values.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6573
Published: 2015-01-21
Description: Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6574
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 6.1.0.3 allows remote attackers to affect integrity via unknown vectors related to Testing Protocol Library.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031576; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6575
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via unknown vectors related to Network, a different vulnerability than CVE-2004-0230.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031583; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6576
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to OAM Integration.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6577
Published: 2015-01-21
Description: Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.  NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the original researcher's claim that this is an XML external entity (XXE) vulnerability in the XML parser, which allows attackers to conduct internal port scanning, perform SSRF attacks, or cause a denial of service via a crafted (1) http: or (2) ftp: URI.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72139; http://www.securitytracker.com/id/1031572
CVE: CVE-2014-6578
Published: 2015-01-21
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72149; http://www.securitytracker.com/id/1031572
CVE: CVE-2014-6579
Published: 2015-01-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Integration Broker.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031577; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6580
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6581
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load Programs.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6582
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Rapid Implementation.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6583
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031579; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6584
Published: 2015-01-21
Description: Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1031594; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-6585
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
CVSS Score: 2.6 (LOW)
References: http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html