Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Oracle Subscribe
Total 9252 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-3475 1 Oracle 1 Knowledge 2017-08-31 4.0 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console.
CVE-2016-3478 1 Oracle 1 Peoplesoft Enterprise Peopletools 2017-08-31 4.3 MEDIUM 6.1 MEDIUM
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.
CVE-2016-5476 1 Oracle 1 Retail Integration Bus 2017-08-31 6.5 MEDIUM 7.6 HIGH
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-3497 1 Oracle 1 Solaris 2017-08-31 4.9 MEDIUM 5.5 MEDIUM
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-5469 and CVE-2016-5471.
CVE-2016-3494 1 Oracle 1 Enterprise Manager Ops Center 2017-08-31 6.1 MEDIUM 6.5 MEDIUM
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.
CVE-2016-3491 1 Oracle 1 Crm Technical Foundation 2017-08-31 8.5 HIGH 8.2 HIGH
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue is a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-5475 1 Oracle 1 Retail Service Backbone 2017-08-31 8.0 HIGH 7.6 HIGH
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5474 1 Oracle 1 Retail Service Backbone 2017-08-31 9.0 HIGH 8.8 HIGH
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel.
CVE-2016-5473 1 Oracle 1 Agile Product Lifecycle Management Framework 2017-08-31 3.5 LOW 3.1 LOW
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3537.
CVE-2016-5472 1 Oracle 1 Peoplesoft Enterprise Peopletools 2017-08-31 7.2 HIGH 7.8 HIGH
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows local users to affect confidentiality, integrity, and availability via vectors related to Install and Packaging.
CVE-2016-5477 1 Oracle 1 Glassfish Server 2017-08-31 5.0 MEDIUM 5.8 MEDIUM
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVE-2016-3530 1 Oracle 1 Agile Product Lifecycle Management Framework 2017-08-31 7.5 HIGH 7.1 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.
CVE-2016-3502 1 Oracle 1 Webcenter Sites 2017-08-31 6.0 MEDIUM 6.5 MEDIUM
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3448 1 Oracle 1 Application Express 2017-08-31 5.8 MEDIUM 6.1 MEDIUM
Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-3432 1 Oracle 1 Business Intelligence Publisher 2017-08-31 4.9 MEDIUM 5.4 MEDIUM
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.
CVE-2016-3526 1 Oracle 1 Agile Product Lifecycle Management Framework 2017-08-31 7.8 HIGH 7.5 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3529 and CVE-2016-3560.
CVE-2016-3517 1 Oracle 1 Agile Product Lifecycle Management Framework 2017-08-31 4.3 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut.
CVE-2016-5446 1 Oracle 1 Integrated Lights Out Manager Firmware 2017-08-31 7.5 HIGH 7.3 HIGH
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure.
CVE-2016-5454 1 Oracle 1 Solaris 2017-08-31 5.4 MEDIUM 6.4 MEDIUM
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot.
CVE-2016-5448 1 Oracle 1 Integrated Lights Out Manager Firmware 2017-08-31 6.4 MEDIUM 6.5 MEDIUM
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.