deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0674
Published: 2016-04-21
Description: Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email.
CVSS Score: 4.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035598; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0675
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securityfocus.com/bid/86450; http://www.securitytracker.com/id/1035615
CVE: CVE-2016-0676
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035629; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0677
Published: 2016-04-21
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035590; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0678
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
CVSS Score: 6.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00130.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00002.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0679
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect integrity and availability via vectors related to PIA Grids.
CVSS Score: 8.7 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0680
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0681
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035590; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0682
Published: 2016-04-21
Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0689, CVE-2016-0692, CVE-2016-0694, and CVE-2016-3418.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0683
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0684
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035600; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0685
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0686
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.
CVSS Score: 9.6 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
CVE: CVE-2016-0687
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
CVSS Score: 9.6 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
CVE: CVE-2016-0688
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components.
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securityfocus.com/bid/86469; http://www.securitytracker.com/id/1035615
CVE: CVE-2016-0689
Published: 2016-04-21
Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0692, CVE-2016-0694, and CVE-2016-3418.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0690
Published: 2016-04-21
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035590; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0691
Published: 2016-04-21
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035590; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0692
Published: 2016-04-21
Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0694, and CVE-2016-3418.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0693
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035629; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0694
Published: 2016-04-21
Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0692, and CVE-2016-3418.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0695
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
CVSS Score: 5.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
CVE: CVE-2016-0696
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securityfocus.com/bid/86443; http://www.securitytracker.com/id/1035615
CVE: CVE-2016-0697
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035603; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0698
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0699
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component.
CVSS Score: 9.1 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035604; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0700
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securityfocus.com/bid/86453; http://www.securitytracker.com/id/1035615
CVE: CVE-2016-1362
Published: 2016-04-21
Description: Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-wlc; http://www.securitytracker.com/id/1035634; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-wlc
CVE: CVE-2016-1363
Published: 2016-04-21
Description: Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd; http://www.securitytracker.com/id/1035633; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd
CVE: CVE-2016-1364
Published: 2016-04-21
Description: Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos; http://www.securitytracker.com/id/1035632; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos
CVE: CVE-2016-1367
Published: 2016-04-21
Description: The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-asa-dhcpv6; http://www.securitytracker.com/id/1035635; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-asa-dhcpv6
CVE: CVE-2016-2004
Published: 2016-04-21
Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://packetstormsecurity.com/files/137199/HP-Data-Protector-A.09.00-Command-Execution.html; http://packetstormsecurity.com/files/137341/HP-Data-Protector-Encrypted-Communication-Remote-Command-Execution.html; http://www.kb.cert.org/vuls/id/267328
CVE: CVE-2016-2005
Published: 2016-04-21
Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1035631; http://www.zerodayinitiative.com/advisories/ZDI-16-245; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988
CVE: CVE-2016-2006
Published: 2016-04-21
Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1035631; http://www.zerodayinitiative.com/advisories/ZDI-16-246; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988
CVE: CVE-2016-2007
Published: 2016-04-21
Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1035631; http://www.zerodayinitiative.com/advisories/ZDI-16-247; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988
CVE: CVE-2016-2008
Published: 2016-04-21
Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1035631; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988; http://www.securitytracker.com/id/1035631
CVE: CVE-2016-2280
Published: 2016-04-21
Description: Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-070-02; https://ics-cert.us-cert.gov/advisories/ICSA-16-070-02
CVE: CVE-2016-2293
Published: 2016-04-21
Description: The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL.
CVSS Score: 8.6 (HIGH)
CWE: CWE-264
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02; https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02
CVE: CVE-2016-2294
Published: 2016-04-21
Description: The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02; https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02
CVE: CVE-2016-3416
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securityfocus.com/bid/86461; http://www.securitytracker.com/id/1035615
CVE: CVE-2016-3417
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-3418
Published: 2016-04-21
Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0692, and CVE-2016-0694.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-3419
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to Filesystem.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035629; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-3420
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3431.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035591; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-3421
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide.
CVSS Score: 7.4 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-3422
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
CVE: CVE-2016-3423
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-0698.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html