CVE-2012-6397

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2012-6397

Cisco WebEx Social (formerly Cisco Quad) is affected by CVE-2012-6397, a Cross-site Scripting (XSS) vulnerability exploitable via a crafted RSS service link (Bug ID CSCub61977). The vulnerability enables remote attackers to inject arbitrary web script or HTML. Core impact is partial integrity exp...

CVE-2012-6392

CVE-2012-6392 affects Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux. The vulnerability arises because LMS does not properly validate authentication and authorization requests in TCP sessions, allowing remote attackers to execute arbitrary commands via a crafted session (por...

CVE-2012-1677

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors...

CVE-2012-5059

Technical details (affected product, vulnerable component, exploit, or fix) are not provided in the supplied documents. Monitor for updates from official advisories; no concrete details available here.

CVE-2012-3168

CVE-2012-3168 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Server Infrastructure (with related components under Siebel CRM). The Nessus entry indicates an easily exploitable vulnerability allowing unauthenticated network attacks via HTTP that can result in a partial d...

CVE-2012-3192

CVE-2012-3192 affects Oracle PeopleSoft Products’ PeopleSoft PeopleTools, specifically the Rich Text Editor component in PeopleTools 8.51 and 8.52. The vulnerability allows remote authenticated users to affect integrity. The provided documents do not specify a concrete fix version or exploit deta...

CVE-2012-3218

CVE-2012-3218 affects Oracle E-Business Suite’s Human Resources component. The vulnerable products are Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3. The description notes an unspecified vulnerability that allows remote authenticated users to affect confidentiality and integrity via unkno...

CVE-2012-3219

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

CVE-2012-1702

CVE-2012-1702 affects Oracle MySQL Server 5.1.66 and earlier and 5.5.28 and earlier. It is described as an unspecified vulnerability in the Server component that could allow remote attackers to affect availability via unknown vectors (no details on vectors provided). Related connected documents (...

CVE-2012-1701

Oracle Siebel CRM 8.1.1 and 8.2.2 are listed as affected in the January 2013 CPU advisory. The connected Nessus plugin for Oracle Siebel CRM (January 2013 CPU) enumerates multiple CVEs, including CVE-2012-1701, affecting Siebel components such as Calendar, Security, and various server/infrastruct...

CVE-2012-3218

Unspecified vulnerability in the Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security Groups...

CVE-2012-5097

Technical details about CVE-2012-5097 (Oracle Access Manager in Oracle Fusion Middleware) are not provided in the supplied documents. Monitor for updates from Oracle and related security advisories.

CVE-2012-3190

CVE-2012-3190 describes an unspecified vulnerability in the Oracle Universal Work Queue (UWQ) component of Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. The entry states that remote attackers could affect confidentiality and integrity and notes issues related to ...

CVE-2012-1755

CVE-2012-1755 affects Oracle PeopleSoft Products’ PeopleTools 8.51, with a vulnerability in the PeopleBooks-PSOL area that could impact integrity. The description is generic and does not detail the root cause or exploit scenario. The CVSS v2 vector (AV:N/AC:M/Au:N/C:N/I:P/A:N) yields a base score...

CVE-2012-5062

CVE-2012-5062 involves an unspecified vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3. The issue allows remote attackers to affect i...

CVE-2012-0572

CVE-2012-0572 affects Oracle MySQL Server 5.1.66 and earlier and 5.5.28 and earlier. The vulnerability is described as an unspecified InnoDB-related issue that allows remote authenticated users to impact availability via unknown vectors. The connected advisories indicate a security update is avai...

CVE-2012-0569

CVE-2012-0569 affects Oracle Solaris 10 (x86 and SPARC) via the Solaris Install/smpatch component. The vulnerability, described in various Nessus/NVD records, implies that local attackers can indirectly affect confidentiality and integrity with partial impact, requiring at least local logon and u...

CVE-2012-1677

Technical details about CVE-2012-1677 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE repositories for affected products, versions, and remediation.

CVE-2012-3170

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by a vulnerability in the Siebel Core - Server Infrastructure (CVE-2012-3170). The issue allows unauthenticated remote attackers to cause a partial denial of service over HTTP. The Nessus plugin for January 2013 CPU references this CVE as part of mul...