rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-4787 
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4789, and CVE-2015-4790.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4788 
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect integrity and availability via unknown vectors, a different vulnerability than CVE-2015-4774 and CVE-2015-4779.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4789 
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, and CVE-2015-4790.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4790 
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, and CVE-2015-4789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4791 
Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4792 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4793 
Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4794 
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4795 
Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Add-On Applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4796 
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-4888.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4797 
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4798 
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4839.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4799 
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4800 
Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4801 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4802 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4803 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4804 
Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Management component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4805 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4806 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4807 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4808 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In Filters, a different vulnerability than CVE-2015-6013, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2015-4809 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In PDF Export SDK, a different vulnerability than CVE-2015-4811.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4810 
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4811 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In PDF Export SDKutside In PDF Export SDK, a different vulnerability than CVE-2015-4809.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4812 
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to OSSL Module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4813 
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4815 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4816 
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4817 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel Zones virtualized NIC driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4818 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Core Technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4819 
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4820 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4907.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4821 
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4822 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4831.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4823 
Unspecified vulnerability in the Hyperion Installation Technology component in Oracle Hyperion 11.1.2.3 allows local users to affect confidentiality via unknown vectors related to Essbase Rapid Deploy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4824 
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4825 
Unspecified vulnerability in the PeopleSoft Enterprise FIN Expenses component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Expense Report General.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4826 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4827 
Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4828 
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management (Security).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4830 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4831 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4822.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4832 
Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3 allows remote attackers to affect integrity via vectors related to OIM Legacy UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4833 
Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4834 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4835 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4836 
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4837 
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4838 
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4839 
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4798.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4840 
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4841 
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM IP2014 and IP2015 allows remote attackers to affect confidentiality via unknown vectors related to Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4842 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4843 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4844 
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4845 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4846 
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to SQL Extensions.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is a SQL injection vulnerability, which allows remote authenticated users to execute arbitrary SQL commands via a request involving the afamexts.sql SQL extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4847 
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OCI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4848 
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Integration with Peoplesoft.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4849 
Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to cause a denial of service or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/IspPunchInServlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4850 
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z
CVE-2015-4851 
Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input.  NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/oramipp_lpr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T23:00:00.000Z