CVE-2015-0443

Technical details for CVE-2015-0443 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2015-0446

Technical details for CVE-2015-0446 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from vendors and security advisories.

CVE-2015-0445

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-2635

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

Oracle Data Quality LoaderWizard DataPreview Type Obfuscation Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality TSS12.DscXB.XB ActiveX Control Memory Misreference Vulnerability

Oracle Data Quality is a suite of software that provides a comprehensive data quality management environment. A memory misreference vulnerability in the onloadstatechange method of the TSS12.DscXB.XB ActiveX control in Oracle Data Quality allows remote attackers to construct a malicious WEB page...

Oracle Data Quality LoaderWizard SetEntities Type Obfuscation Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in Oracle Data Quality's...

Oracle Data Quality DscXB onloadstatechange Memory Misreference Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality LoaderWizard DataPreview Type Confusion (CVE-2015-0446)

A remote code execution vulnerability has been reported in Oracle Data Quality LoaderWizard DataPreview method contained in the TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to type confusion when handling data passed to it. A remote attacker can exploit this vulnerability b...

(0Day) Oracle Data Quality LoaderWizard Module Unloading Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Oracle Data Quality LoaderWizard SetEntities Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Oracle Data Quality LoaderWizard DataPreview Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Oracle Data Quality DscXB onloadstatechange Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Oracle Enterprise Data Quality Director Detection

Binary data oracleedqdirectordetect.nbin...

Oracle Enterprise Data Quality Dashboard Detection

Binary data oracleedqdashboarddetect.nbin...

Oracle Enterprise Data Quality Multiple Vulnerabilities (October 2014 CPU)

The version of Oracle Enterprise Data Quality running on the remote host is affected by multiple vulnerabilities : - A flaw in Apache Commons BeanUtils allows a remote attacker to execute arbitrary code by manipulating the ClassLoader. CVE-2014-0114 - A flaw in Apache Tomcat allows a remote...

Cross site scripting

Cross-site scripting XSS vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection...

CVE-2014-3071

The CVE-2014-3071 vulnerability affects IBM InfoSphere Data Quality Console (11.3). The issue is a cross-site scripting (XSS) flaw that can be triggered when adding a new project connection, allowing an attacker to craft a link that could be used by an authenticated user to execute arbitrary scri...

CVE-2014-3071

Cross-site scripting XSS vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection...

Oracle Data Quality PostcardPreviewInt onclose Untrusted Pointer Dereference (CVE-2014-2415)

A remote code execution vulnerability exists in Oracle Data Profiling and Data Quality for Data Integrator. The vulnerability is due to dereferencing an arbitrary pointer within the TSS12.TransformerTools.PostcardPreviewInt ActiveX control. A remote attacker can exploit this vulnerability by...