deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1568
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 6.2.0 allows remote authenticated users to affect availability via unknown vectors related to CB.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-1570
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote attackers to affect availability via unknown vectors related to MemCached.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2374
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Rich Text Editor.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2375
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0772.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2013-2376
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2377
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to My Services.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2378
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
CVSS Score: 6.5 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0772.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2013-2379
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows remote authenticated users to affect integrity via unknown vectors related to RT.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2380
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and R28.2.6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: this might be a duplicate of CVE-2013-1537 and CVE-2013-2415. If so, then CVE-2013-2380 might be REJECTed in the future.
CVSS Score: 10.0 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2381
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server Privileges.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2382
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows local users to affect confidentiality via vectors related to BASE.
CVSS Score: 1.7 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2385
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via vectors related to BASE, a different vulnerability than CVE-2013-1560.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2386
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect integrity and availability via vectors related to BASE.
CVSS Score: 4.9 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2387
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE.
CVSS Score: 3.6 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2388
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2389
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0772.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2013-2390
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2, 10.3.5, 10.3.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors related to WebLogic Console, a different vulnerability than CVE-2013-1504.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2391
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.
CVSS Score: 3.0 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2013-0772.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2013-2392
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0772.html; http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml
CVE: CVE-2013-2393
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.
CVSS Score: 1.5 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21660640; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2013-2395
Published: 2013-04-17
Description: Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-1567.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/53372; http://security.gentoo.org/glsa/glsa-201308-06.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2396
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via vectors related to HTML OAM client.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2397
Published: 2013-04-17
Description: Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Customer Operations (Add, Search).
CVSS Score: 5.5 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2398
Published: 2013-04-17
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client.
CVSS Score: 6.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2399
Published: 2013-04-17
Description: Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2401
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2402
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to WorkCenter.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2403
Published: 2013-04-17
Description: Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-0416.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2404
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-3818.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2405
Published: 2013-04-17
Description: Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access.
CVSS Score: 5.5 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2406
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.
CVSS Score: 3.5 (LOW)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2408
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology and use of Internet Explorer 6.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2409
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via vectors related to PIA Core Technology.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2410
Published: 2013-04-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2411
Published: 2013-04-17
Description: Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access.
CVSS Score: 4.3 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2413
Published: 2013-04-17
Description: Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services.
CVSS Score: 4.9 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-2441
Published: 2013-04-17
Description: Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to Java Client.
CVSS Score: 4.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2013-1518
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."
CVSS Score: 10.0 (HIGH)
References: http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/; http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
CVE: CVE-2013-1537
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/; http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
CVE: CVE-2013-1540
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html
CVE: CVE-2013-1557
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
CVSS Score: 10.0 (HIGH)
References: http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/; http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
CVE: CVE-2013-1558
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7316&w=2; http://rhn.redhat.com/errata/RHSA-2013-0752.html
CVE: CVE-2013-1561
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0757.html; http://www.oracle.com/technetwork/topics/security/javacpuapr2[PII_REDACTED].html; http://www.us-cert.gov/ncas/alerts/TA13-107A
CVE: CVE-2013-1563
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
CVSS Score: 7.6 (HIGH)
References: http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html
CVE: CVE-2013-1564
Published: 2013-04-17
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2013-0757.html; http://www.oracle.com/technetwork/topics/security/javacpuapr2[PII_REDACTED].html; http://www.us-cert.gov/ncas/alerts/TA13-107A