deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4844
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4845
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/134098/Oracle-E-Business-Suite-12.2.4-Database-User-Enumeration.html; http://seclists.org/fulldisclosure/2015/Oct/97; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4846
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to SQL Extensions.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is a SQL injection vulnerability, which allows remote authenticated users to execute arbitrary SQL commands via a request involving the afamexts.sql SQL extension.
CVSS Score: 3.6 (LOW)
References: http://packetstormsecurity.com/files/134099/Oracle-E-Business-Suite-12.1.3-12.1.4-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/99; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4847
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OCI.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033899; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4848
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Integration with Peoplesoft.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033899; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4849
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to cause a denial of service or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/IspPunchInServlet.
CVSS Score: 6.8 (MEDIUM)
References: http://packetstormsecurity.com/files/134118/Oracle-E-Business-Suite-12.1.3-XXE-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/112; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4850
Published: 2015-10-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033903; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4851
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/oramipp_lpr.
CVSS Score: 6.8 (MEDIUM)
References: http://packetstormsecurity.com/files/134119/Oracle-E-Business-Suite-12.1.3-XXE-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/113; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4854
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML via the Domain parameter in the CfgOCIReturn servlet.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/134100/Oracle-E-Business-Suite-12.1.4-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Oct/100; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4856
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.30, 4.1.38, 4.2.30, 4.3.26, and 5.0.0 allows local users to affect availability via unknown vectors related to Core.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033880; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4857
Published: 2015-10-21
Description: Unspecified vulnerability in the RDBMS component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033883; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4858
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
CVE: CVE-2015-4859
Published: 2015-10-21
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Agent Next Gen.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033897; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4860
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4861
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
CVSS Score: 3.5 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
CVE: CVE-2015-4862
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS Score: 4.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77147
CVE: CVE-2015-4863
Published: 2015-10-21
Description: Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033883; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4864
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
CVSS Score: 3.5 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2015-1628.html; http://rhn.redhat.com/errata/RHSA-2015-1665.html; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html
CVE: CVE-2015-4865
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033877; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4866
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77132; http://www.securitytracker.com/id/1033894
CVE: CVE-2015-4867
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033898; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4868
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html; http://rhn.redhat.com/errata/RHSA-2015-1919.html
CVE: CVE-2015-4869
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via unknown vectors related to Kernel.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033881; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4870
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html
CVE: CVE-2015-4871
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
CVE: CVE-2015-4872
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4873
Published: 2015-10-21
Description: Unspecified vulnerability in the Database Scheduler component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77183; http://www.securitytracker.com/id/1033883
CVE: CVE-2015-4874
Published: 2015-10-21
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen.
CVSS Score: 4.1 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033897; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4875
Published: 2015-10-21
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect availability via unknown vectors related to Agent Next Gen.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033897; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4876
Published: 2015-10-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via unknown vectors related to Pivot Grid.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033903; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4877
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4878.
CVSS Score: 1.5 (LOW)
References: http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/536762/100/0/threaded
CVE: CVE-2015-4878
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4877.
CVSS Score: 1.5 (LOW)
References: http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/536762/100/0/threaded
CVE: CVE-2015-4879
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177539.html; http://rhn.redhat.com/errata/RHSA-2015-1628.html; http://rhn.redhat.com/errata/RHSA-2016-0534.html
CVE: CVE-2015-4880
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4867.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033898; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4881
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4882
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4883
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html
CVE: CVE-2015-4884
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033877; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4886
Published: 2015-10-21
Description: Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Reports Security.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, or conduct SMB Relay attacks via a crafted DTD in an XML request involving the OA_HTML/copxml servlet.
CVSS Score: 6.4 (MEDIUM)
References: http://packetstormsecurity.com/files/134117/Oracle-E-Business-Suite-12.1.3-XXE-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/111; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4887
Published: 2015-10-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ePerformance.
CVSS Score: 6.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033903; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4888
Published: 2015-10-21
Description: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-4796.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033883; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2015-4890
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Replication.
CVSS Score: 3.5 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77231
CVE: CVE-2015-4891
Published: 2015-10-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to NSCD.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1033881; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html