deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-2093
Published: 2020-01-15
Description: A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708
CVE: CVE-2020-2094
Published: 2020-01-15
Description: A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708
CVE: CVE-2020-2095
Published: 2020-01-15
Description: Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696
CVE: CVE-2020-2096
Published: 2020-01-15
Description: Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155967/Jenkins-Gitlab-Hook-1.4.2-Cross-Site-Scripting.html; http://www.openwall.com/lists/oss-security/2020/01/15/1; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1683
CVE: CVE-2020-2097
Published: 2020-01-15
Description: Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814
CVE: CVE-2020-2098
Published: 2020-01-15
Description: A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814; https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814
CVE: CVE-2005-4891
Published: 2020-01-15
Description: Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2012/11/14/10; https://securiteam.com/exploits/5HP0N0KG0O/; http://www.openwall.com/lists/oss-security/2012/11/14/10
CVE: CVE-2007-4773
Published: 2020-01-15
Description: Systrace before 1.6.0 has insufficient escape policy enforcement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://taviso.decsystem.org/research.html; http://taviso.decsystem.org/research.t2t; http://www.citi.umich.edu/u/provos/systrace/
CVE: CVE-2007-4774
Published: 2020-01-15
Description: The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: http://taviso.decsystem.org/research.html; https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2015-5230
Published: 2020-01-15
Description: The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2015/dsa-3347; http://www.securitytracker.com/id/1033475; https://doc.powerdns.com/md/security/powerdns-advisory-2015-02/
CVE: CVE-2015-5952
Published: 2020-01-15
Description: Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2015/Aug/24; http://seclists.org/fulldisclosure/2015/Aug/24
CVE: CVE-2015-6497
Published: 2020-01-15
Description: The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://blog.mindedsecurity.com/2015/09/autoloaded-file-inclusion-in-magento.html; http://karmainsecurity.com/KIS-2015-04; http://magento.com/security/patches/supee-6482
CVE: CVE-2017-3211
Published: 2020-01-15
Description: Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-213, CWE-200
References: https://blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/; https://blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/
CVE: CVE-2019-16466
Published: 2020-01-15
Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE: CVE-2019-16467
Published: 2020-01-15
Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE: CVE-2019-16468
Published: 2020-01-15
Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE: CVE-2019-16469
Published: 2020-01-15
Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-917
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE: CVE-2019-9493
Published: 2020-01-15
Description: The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain unauthorized physical access to a vehicle. This issue affects AutoMobility MyCar versions prior to 3.4.24 on iOS and versions prior to 4.1.2 on Android. This issue has additionally been fixed in Carlink, Link, Visions MyCar, and MyCar Kia.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://itunes.apple.com/us/app/mycar-controls/id[PII_REDACTED]; https://mycarcontrols.com/; https://play.google.com/store/apps/details?id=app.com.automobility.mycar.control
CVE: CVE-2019-9510
Published: 2020-01-15
Description: A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a temporary RDP disconnect, Automatic Reconnection of the RDP session will be restored to an unlocked state, regardless of how the remote system was left. By interrupting network connectivity of a system, an attacker with access to a system being used as a Windows RDP client can gain access to a connected remote system, regardless of whether or not the remote system was locked. This issue affects Microsoft Windows 10, version 1803 and later, and Microsoft Windows Server 2019, version 2019 and later.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-288, CWE-755
References: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/e729948a-3f4e-4568-9aef-d355e30b5389; https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732713%28v=ws.11%29; https://social.technet.microsoft.com/Forums/windowsserver/en-US/1fd171de-a1b5-4721-86bf-082e4a375049/rds-2019-but-probably-other-versions-as-well-locked-rdp-session-logs-in-after-session-reconnect
CVE: CVE-2020-2510
Published: 2020-01-15
Description: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Core RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Core RDBMS. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Feb/13; https://www.oracle.com/security-alerts/cpujan2020.html; http://seclists.org/fulldisclosure/2021/Feb/13
CVE: CVE-2020-2511
Published: 2020-01-15
Description: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Core RDBMS. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVSS Score: 7.7 (HIGH)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2512
Published: 2020-01-15
Description: Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Database Gateway for ODBC. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Database Gateway for ODBC. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 5.9 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2515
Published: 2020-01-15
Description: Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Database Gateway for ODBC. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Database Gateway for ODBC accessible data as well as unauthorized read access to a subset of Database Gateway for ODBC accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Database Gateway for ODBC. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L).
CVSS Score: 5.0 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2516
Published: 2020-01-15
Description: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Materialized View, Create Table privilege with network access via OracleNet to compromise Core RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Core RDBMS accessible data. CVSS 3.0 Base Score 2.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N).
CVSS Score: 2.4 (LOW)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2517
Published: 2020-01-15
Description: Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Procedure, Create Database Link privilege with network access via OracleNet to compromise Database Gateway for ODBC. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Database Gateway for ODBC accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Database Gateway for ODBC. CVSS 3.0 Base Score 3.3 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L).
CVSS Score: 3.3 (LOW)
References: http://seclists.org/fulldisclosure/2021/Feb/13; https://www.oracle.com/security-alerts/cpujan2020.html; http://seclists.org/fulldisclosure/2021/Feb/13
CVE: CVE-2020-2518
Published: 2020-01-15
Description: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 7.5 (HIGH)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2519
Published: 2020-01-15
Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
CVSS Score: 4.3 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2527
Published: 2020-01-15
Description: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via OracleNet to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).
CVSS Score: 4.1 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2530
Published: 2020-01-15
Description: Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle HTTP Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS Score: 6.1 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2531
Published: 2020-01-15
Description: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
CVSS Score: 3.1 (LOW)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2533
Published: 2020-01-15
Description: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS Score: 6.1 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2534
Published: 2020-01-15
Description: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data as well as unauthorized read access to a subset of Oracle Reports Developer accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS Score: 6.1 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2535
Published: 2020-01-15
Description: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).
CVSS Score: 4.7 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2020-2536
Published: 2020-01-15
Description: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).
CVSS Score: 5.4 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujan2020.html; https://www.oracle.com/security-alerts/cpujan2020.html