CVE-2014-6567

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 201...

Xxe

Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not...

Design/Logic Flaw

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

CVE-2014-6578

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

CVE-2014-6577

CVE-2014-6577 is an Oracle Database Server issue affecting the XML Developer's Kit for C component. Versions 11.2.0.3/11.2.0.4/12.1.0.1/12.1.0.2 are affected. The vulnerability is described as an XML external entity (XXE) issue in the XML parser that could allow a remote, authenticated user to af...

CVE-2014-6578

CVE-2014-6578 affects Oracle Database Server Workspace Manager component in Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT....

CVE-2014-6541

CVE-2014-6541 affects Oracle Database Server via the Recovery component (DBMS_IR) on Windows, impacting confidentiality for affected versions (11.1.0.7, 11.2.0.3/4, 12.1.0.1/2) when accessed by remote authenticated users. Connected sources indicate a single-vendor Oracle remediation path through ...

Oracle Database Server Remote Vulnerability (CNVD-2015-00468)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Execute on DBMSIR' privileges using the 'Oracle Net' protocol...

PT-2015-3870

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 Description The issue affects the confidentiality of the system, related to the DBMS IR component in the Recovery component of Oracle Database Server when...

PT-2015-3885

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.3 through 11.2.0.4 Oracle Database Server versions 12.1.0.1 through 12.1.0.2 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors. It is...

Oracle Database Server Remote Vulnerability (CNVD-2015-00490)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Valid account' privileges using the 'HTTP' protocol...

Oracle Database Server Remote Vulnerability (CNVD-2015-00473)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Create Session' privileges using the 'Oracle Net' protocol...

CVE-2014-6541: Undefined Security Weakness

Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality via vectors related to DBMSIR...

CVE-2015-0373: Undefined Security Weakness

Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

PT-2015-4585

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 Description The issue affects the integrity of the Core RDBMS component in Oracle Database Server, allowing remote authenticated users to exploit it via unknown vectors...

Oracle Database Server Remote Vulnerability (CNVD-2015-00470)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Create Session, Create Table' privileges using the 'Oracle Net' protocol...

Oracle Database Server Remote Vulnerability (CNVD-2015-00487)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Create Session' privileges using the 'Oracle Net' protocol...

PT-2015-3886

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 Description The issue affects the confidentiality, integrity, and availability of the system. It is related to vectors involving SDO TOPO and WMSYS.LT. Recommendations...

PT-2015-4586

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 Description The issue affects the integrity and availability of the system, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For...

PT-2015-3863

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 Description The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it via unknown vectors. No information is provided about...