deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-5106
Published: 2015-07-15
Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allow attackers to bypass intended access restrictions and perform a transition from Low Integrity to Medium Integrity via unspecified vectors, a different vulnerability than CVE-2015-4446 and CVE-2015-5090.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/75743; http://www.securitytracker.com/id/1032892; http://www.zerodayinitiative.com/advisories/ZDI-15-370
CVE: CVE-2015-5107
Published: 2015-07-15
Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allow attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032892; http://www.zerodayinitiative.com/advisories/ZDI-15-371; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5108
Published: 2015-07-15
Description: Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5097 and CVE-2015-5109.
CVSS Score: 10.0 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/75741; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5109
Published: 2015-07-15
Description: Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5097 and CVE-2015-5108.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://www.securityfocus.com/bid/75741; http://www.securitytracker.com/id/1032892; http://www.zerodayinitiative.com/advisories/ZDI-15-369
CVE: CVE-2015-5110
Published: 2015-07-15
Description: Stack-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://www.securitytracker.com/id/1032892; http://www.zerodayinitiative.com/advisories/ZDI-15-368; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5111
Published: 2015-07-15
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4448, CVE-2015-5095, CVE-2015-5099, CVE-2015-5101, CVE-2015-5113, and CVE-2015-5114.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/75739; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5113
Published: 2015-07-15
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4448, CVE-2015-5095, CVE-2015-5099, CVE-2015-5101, CVE-2015-5111, and CVE-2015-5114.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/75739; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5114
Published: 2015-07-15
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4448, CVE-2015-5095, CVE-2015-5099, CVE-2015-5101, CVE-2015-5111, and CVE-2015-5113.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/75739; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-5115
Published: 2015-07-15
Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3095, CVE-2015-5087, CVE-2015-5094, CVE-2015-5100, CVE-2015-5102, CVE-2015-5103, and CVE-2015-5104.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/75740; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html
CVE: CVE-2015-4267
Published: 2015-07-15
Description: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39872; http://www.securitytracker.com/id/1032929; http://tools.cisco.com/security/center/viewAlert.x?alertId=39872
CVE: CVE-2015-4271
Published: 2015-07-15
Description: Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39880; http://www.securitytracker.com/id/1032931; http://tools.cisco.com/security/center/viewAlert.x?alertId=39880
CVE: CVE-2015-0443
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0444
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0445
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0446
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0467
Published: 2015-07-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Security.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032917; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0468
Published: 2015-07-16
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032903
CVE: CVE-2015-1926
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75860; http://www.securitytracker.com/id/1032926
CVE: CVE-2015-2580
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4.
CVSS Score: 1.9 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75889; http://www.securitytracker.com/id/1032914
CVE: CVE-2015-2581
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via unknown vectors related to JServer.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2582
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2015-1628.html; http://rhn.redhat.com/errata/RHSA-2015-1629.html
CVE: CVE-2015-2583
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2584
Published: 2015-07-16
Description: Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2592.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032924; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2585
Published: 2015-07-16
Description: Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032903; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2586
Published: 2015-07-16
Description: Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032903; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2587
Published: 2015-07-16
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75876; http://www.securitytracker.com/id/1032916
CVE: CVE-2015-2588
Published: 2015-07-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032917; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2589
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zone.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75878; http://www.securitytracker.com/id/1032914
CVE: CVE-2015-2590
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
CVE: CVE-2015-2591
Published: 2015-07-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise Portal - Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote authenticated users to affect integrity via unknown vectors related to Enterprise Portal.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032917; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2592
Published: 2015-07-16
Description: Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2584.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032924; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2593
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service.
CVSS Score: 7.1 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2594
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
CVSS Score: 6.6 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html; http://www.debian.org/security/2015/dsa-3359; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2595
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032903; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2596
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html
CVE: CVE-2015-2597
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
CVSS Score: 7.2 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
CVE: CVE-2015-2598
Published: 2015-07-16
Description: Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2599
Published: 2015-07-16
Description: Unspecified vulnerability in the RDBMS Scheduler component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032903
CVE: CVE-2015-2600
Published: 2015-07-16
Description: Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032916; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-2601
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
CVSS Score: 5.0 (MEDIUM)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
CVE: CVE-2015-2602
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2603, CVE-2015-2604, CVE-2015-2605, CVE-2015-2606, and CVE-2015-4745.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75755; http://www.zerodayinitiative.com/advisories/ZDI-15-355
CVE: CVE-2015-2603
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2604, CVE-2015-2605, CVE-2015-2606, and CVE-2015-4745.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75754; http://www.zerodayinitiative.com/advisories/ZDI-15-356
CVE: CVE-2015-2604
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2603, CVE-2015-2605, CVE-2015-2606, and CVE-2015-4745.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75757; http://www.zerodayinitiative.com/advisories/ZDI-15-354