deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1362
Published: 2012-01-15
Description: Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1308.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM40733; http://www-01.ibm.com/support/docview.wss?uid=swg1PM65992; http://www-01.ibm.com/support/docview.wss?uid=swg27007951
CVE: CVE-2011-1377
Published: 2012-01-15
Description: The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/46469; http://www-01.ibm.com/support/docview.wss?uid=swg1PM43792; http://www-01.ibm.com/support/docview.wss?uid=swg1PM50205
CVE: CVE-2011-4868
Published: 2012-01-15
Description: The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://security.gentoo.org/glsa/glsa-201301-06.xml; https://deepthought.isc.org/article/AA-00595; https://kb.isc.org/article/AA-00705
CVE: CVE-2011-5065
Published: 2012-01-15
Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/46469; http://www-01.ibm.com/support/docview.wss?uid=swg1PM37840; http://www-01.ibm.com/support/docview.wss?uid=swg1PM49872
CVE: CVE-2011-5066
Published: 2012-01-15
Description: The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus (SIB) dump operation involving the First Failure Data Capture (FFDC) introspection code, which allows local users to obtain sensitive information by reading the FFDC log file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM36685; http://www-01.ibm.com/support/docview.wss?uid=swg27007951; http://www-01.ibm.com/support/docview.wss?uid=swg1PM36685
CVE: CVE-2012-0266
Published: 2012-01-15
Description: Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0074.html; http://osvdb.org/78252; http://secunia.com/advisories/45166
CVE: CVE-2012-0267
Published: 2012-01-15
Description: The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/45166; http://secunia.com/secunia_research/2012-2/; http://www.exploit-db.com/exploits/21839
CVE: CVE-2010-5082
Published: 2012-01-17
Description: Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://shinnai.altervista.org/exploits/SH[PII_REDACTED]4.html; http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012
CVE: CVE-2011-3328
Published: 2012-01-17
Description: The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.
CVSS Score: 2.6 (LOW)
References: http://libpng.org/pub/png/libpng.html; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE: CVE-2011-4153
Published: 2012-01-18
Description: PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html; http://cxsecurity.com/research/103; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-0031
Published: 2012-01-18
Description: scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html
CVE: CVE-2012-0188
Published: 2012-01-18
Description: Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/78329; http://secunia.com/advisories/47565; http://www-01.ibm.com/support/docview.wss?uid=swg21577956
CVE: CVE-2012-0189
Published: 2012-01-18
Description: Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/47605; http://www.ibm.com/support/docview.wss?uid=swg21577951; https://exchange.xforce.ibmcloud.com/vulnerabilities/72119
CVE: CVE-2012-0190
Published: 2012-01-18
Description: Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/47565; http://www-01.ibm.com/support/docview.wss?uid=swg21577956; https://exchange.xforce.ibmcloud.com/vulnerabilities/72121
CVE: CVE-2012-0781
Published: 2012-01-18
Description: The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html; http://cxsecurity.com/research/103; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html
CVE: CVE-2011-2262
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://secunia.com/advisories/48250; http://secunia.com/advisories/53372
CVE: CVE-2011-2271
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-2317
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC (JDNET).
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-2321
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDNET).
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-2324
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-2325
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-2326
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3509
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3514
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3524
Published: 2012-01-18
Description: Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3531
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3564
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3565
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Calendar Server.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3566
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3568
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3569
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3570
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality via unknown vectors related to Calendar Server.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3571
Published: 2012-01-18
Description: Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session.  NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
CVSS Score: 3.6 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html; http://secunia.com/advisories/48073; http://secunia.com/advisories/48074
CVE: CVE-2011-3573
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Communications Unified 7.0 allows remote authenticated users to affect availability via unknown vectors related to Calendar Server.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2011-3574
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality and integrity via unknown vectors related to Calendar Server.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0072
Published: 2012-01-18
Description: Unspecified vulnerability in the Listener component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/78419; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51458
CVE: CVE-2012-0073
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Forms component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/78439; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51473
CVE: CVE-2012-0074
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78441; http://secunia.com/advisories/47621; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0075
Published: 2012-01-18
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 1.7 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html; http://osvdb.org/78374
CVE: CVE-2012-0076
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78395; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51474
CVE: CVE-2012-0077
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console.
CVSS Score: 3.5 (LOW)
References: http://jvn.jp/en/jp/JVN54779201/index.html; http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000007.html; http://osvdb.org/78401
CVE: CVE-2012-0078
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/78399; http://secunia.com/advisories/47628; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE: CVE-2012-0079
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/78412; http://rhn.redhat.com/errata/RHSA-2012-1232.html; http://secunia.com/advisories/46646
CVE: CVE-2012-0080
Published: 2012-01-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51466; https://exchange.xforce.ibmcloud.com/vulnerabilities/72481
CVE: CVE-2012-0081
Published: 2012-01-18
Description: Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
CVSS Score: 3.7 (LOW)
References: http://osvdb.org/78415; http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51485
CVE: CVE-2012-0082
Published: 2012-01-18
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51453; http://www.securitytracker.com/id?1026527
CVE: CVE-2012-0083
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51451; https://exchange.xforce.ibmcloud.com/vulnerabilities/72470
CVE: CVE-2012-0084
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51454; https://exchange.xforce.ibmcloud.com/vulnerabilities/72476
CVE: CVE-2012-0085
Published: 2012-01-18
Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html; http://www.securityfocus.com/bid/51457; https://exchange.xforce.ibmcloud.com/vulnerabilities/72475