WebSphere Application Server Privilege Escalation

The vulnerability of OIDC components and TAI server components of WebSphere Application Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2016-0280

Cross-site scripting XSS vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Email Center Server Components Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Email Center Server Components component, which allows remote attackers to exploit the vulnerability to submit a special request to acces...

CVE-2016-0568

Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Server Components...

CVE-2016-0568

Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Server Components...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Server Components...

CVE-2016-0568

CVE-2016-0568 affects Oracle E-Business Suite (12.1.1–12.1.3) specifically the Oracle Email Center Server Components. The vulnerability is described as unspecified with remote attackers potentially compromising confidentiality via unknown vectors related to Server Components. The available connec...

CVE-2016-0568: Undefined Security Weakness

Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Server Components...

PT-2016-4319

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Server Components in the Oracle Email Center component. Recommendation...

CVE-2013-2399

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

Code injection

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

CVE-2013-2399

CVE-2013-2399 affects Oracle Siebel CRM 8.1.1/8.2.2, specifically the Siebel Call Center component (Email - COMM Server Components). The Nessus entry notes this vulnerability allows authenticated network attackers to read a subset of Siebel Call Center data. The public documents do not provide ex...

CVE-2013-2399

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

CVE-2013-2399: Undefined Security Weakness

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

Design/Logic Flaw

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to 1 the Lock Server or 2 the Advanced Multithreaded Server...

CVE-2011-0489

CVE-2011-0489 affects Objectivity/DB 10.0 server components, where authentication is not required for administrative commands. This allows remote attackers to modify data, retrieve sensitive information, or cause a denial of service by sending commands over TCP to the Lock Server or the Advanced ...

CVE-2005-2996

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...

CVE-2005-2996: Undefined Security Weakness

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...