CVE-2015-2586

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors...

CVE-2015-2647

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect...

CVE-2015-2655

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2015-2655: a cross-site scripting vulnerability affecting all versions prior to 4.2.3.00.08. It can impact confidentiality and integrity via remote access authenticated users. The fixed version is 4.2.3.00.08. Mitigati...

CVE-2015-4755

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2015-4755

CVE-2015-4755 is a disclosed vulnerability in the Oracle Database Server RDBMS Security component (Oracle Database Server 12.1.0.2). OpenVAS lists this CVE as part of the July 2015 CPU suite and notes affected products include Oracle Database Server and specific versions such as 12.1.0.2. The vul...

CVE-2015-2599

Unspecified vulnerability in the RDBMS Scheduler component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2015-2647

CVE-2015-2647 affects Oracle Enterprise Manager Grid Control and related EM components (EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5/6/7; EM DB Control 11.1.0.7, 11.2.0.3/4) as described in the SUSE security bulletin. The vulnerability is located in the Content Management subcomponent and...

CVE-2015-2599

CVE-2015-2599 affects Oracle Database Server (RDBMS Scheduler component). Affected versions include 11.1.0.7, 11.2.0.3/11.2.0.4, 12.1.0.1/12.1.0.2. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors. NVD notes a Network attack vector with Low complex...

CVE-2015-2655

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2015-0468

CVE-2015-0468 affects Oracle Database Server’s Core RDBMS component (versions 11.1.0.7, 11.2.0.3, 12.1.0.1). The vulnerability allows remote, authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Public references describe an unspecified vulnerability in ...

CVE-2015-2586

Affected software: Oracle Database Server (Application Express component). Vulnerability summary (from sources): Unspecified vulnerability in the Application Express component allows remote attackers to affect availability via unknown vectors. Affected versions include Oracle Database Server prio...

CVE-2015-0468

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2015-2629

Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0457...

CVE-2015-2585

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors...

Oracle Patches VENOM Vulnerability

Oracle, whose virtualization software VirtualBox is among those affected by the VENOM vulnerability, on Saturday joined the litany of VM providers that have patched the bug. Oracle was one of the first vendors notified by Crowdstrike, whose researcher Jason Geffner found the bug and disclosed it...

The vulnerability of the Oracle Database database management system allows a remote attacker to compromise data accessibility.

The vulnerability of the Oracle Database management system in the XDK and XDB components – XML Databases – allows a malicious actor, who operates remotely and has completed the authentication process, to compromise the accessibility of data...

The vulnerability of the Oracle Database database management system allows a remote attacker to compromise data confidentiality.

The vulnerability of the Oracle Database management system in the XDB – XML Database component allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data confidentiality...

The vulnerability of the Oracle Database database management system allows a remote attacker to compromise data integrity.

The vulnerability of the Oracle Database management system in the Core RDBMS component allows a malicious actor, who operates remotely and has completed the authentication process, to compromise the integrity of the data...

The vulnerability of the Oracle Database database management system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Oracle Database database management system’s Java VM component allows a malicious actor, who operates remotely and has completed the authentication process, to compromise the confidentiality, integrity, and accessibility of data...

Oracle Database Multiple Vulnerabilities (April 2015 CPU)

The remote Oracle database server is missing the April 2015 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities in the following components : - Core RDBMS CVE-2015-0483 - Java VM CVE-2015-0457 - XDB-XML Database CVE-2015-0455 - XDK and XDB-XML Database CVE-2015-0479...