deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-4190
Published: 2012-10-12
Description: The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.mozilla.org/security/announce/2012/mfsa2012-88.html; http://www.securitytracker.com/id?1027653; https://bugzilla.mozilla.org/show_bug.cgi?id=790139
CVE: CVE-2012-4191
Published: 2012-10-12
Description: The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://osvdb.org/86125; http://secunia.com/advisories/50904; http://secunia.com/advisories/50929
CVE: CVE-2012-4192
Published: 2012-10-12
Description: Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html; http://secunia.com/advisories/50904; http://secunia.com/advisories/50929
CVE: CVE-2012-4193
Published: 2012-10-12
Description: Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-346
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html; http://rhn.redhat.com/errata/RHSA-2012-1361.html; http://rhn.redhat.com/errata/RHSA-2012-1362.html
CVE: CVE-2012-0227
Published: 2012-10-12
Description: Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dsecrg.com/pages/vul/show.php?id=406; http://www.securityfocus.com/bid/51601; http://www.us-cert.gov/control_systems/pdf/ICSA-12-012-01A.pdf
CVE: CVE-2012-1531
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html
CVE: CVE-2012-1532
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-1533
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-3143
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html
CVE: CVE-2012-3159
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1533.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-3216
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVSS Score: 2.6 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-4416
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-5067
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://rhn.redhat.com/errata/RHSA-2012-1391.html; http://rhn.redhat.com/errata/RHSA-2012-1467.html
CVE: CVE-2012-5068
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html
CVE: CVE-2012-5069
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5070
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://rhn.redhat.com/errata/RHSA-2012-1386.html; http://rhn.redhat.com/errata/RHSA-2012-1391.html
CVE: CVE-2012-5071
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5072
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html
CVE: CVE-2012-5073
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5074
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://rhn.redhat.com/errata/RHSA-2012-1386.html; http://rhn.redhat.com/errata/RHSA-2012-1391.html
CVE: CVE-2012-5075
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5076
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://rhn.redhat.com/errata/RHSA-2012-1386.html; http://rhn.redhat.com/errata/RHSA-2012-1391.html
CVE: CVE-2012-5077
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVSS Score: 2.6 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-5078
Published: 2012-10-16
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5080.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://www.oracle.com/technetwork/topics/security/javacpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/56066
CVE: CVE-2012-5079
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5080
Published: 2012-10-16
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5078.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://www.oracle.com/technetwork/topics/security/javacpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/56068
CVE: CVE-2012-5081
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5082
Published: 2012-10-16
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://osvdb.org/86370; http://www.oracle.com/technetwork/topics/security/javacpuoct2[PII_REDACTED].html
CVE: CVE-2012-5083
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00011.html
CVE: CVE-2012-5084
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-5085
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated users to have an unspecified impact via unknown vectors related to Networking.  NOTE: the Oracle CPU states that this issue has a 0.0 CVSS score. If so, then this is not a vulnerability and this issue should not be included in CVE.
CVSS Score: 0.0 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-5086
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2
CVE: CVE-2012-5087
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7757&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1658&w=2
CVE: CVE-2012-5088
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://rhn.redhat.com/errata/RHSA-2012-1386.html; http://rhn.redhat.com/errata/RHSA-2012-1391.html
CVE: CVE-2012-5089
Published: 2012-10-16
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-3143.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html
CVE: CVE-2012-0071
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0093.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0086
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0090
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0092.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0092
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0090.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0093
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0071.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0095
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0108.
CVSS Score: 2.1 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0106
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web.
CVSS Score: 4.9 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-0107
Published: 2012-10-16
Description: Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect availability via unknown vectors related to Web.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150