CVE-2016-2183

The CVE-2016-2183 (Sweet32) issue stems from the DES/3DES ciphers used in TLS/SSL, allowing a birthday attack to recover plaintext from long, encrypted sessions. Public advisories and vendor notes show OpenSSL-based stacks (and products relying on it) were affected, with mitigations including de-...

CVE-2016-0677

CVE-2016-0677 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 in the RDBMS Security component. The connected documents corroborate an unspecified vulnerability that can impact availability (initial description) and further indicate related fixes in the Oracle April 2016 CPU advisory (CPUAPR2...

CVE-2016-3489

CVE-2016-3489 refers to an unspecified vulnerability in the Data Pump Import component of Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue is described as affecting confidentiality, integrity, and availability via unknown vectors, exploitable by local users. The connect...

CVE-2016-3609

CVE-2016-3609 affects Oracle Database Server OJVM in versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified with remote authenticated access, impacting confidentiality, integrity, and availability via unknown vectors. Affected component: OJVM. Root cause/attack v...

CVE-2016-3484

CVE-2016-3484 affects Oracle Database Server’s Database Vault component, versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. It is described as an unspecified local vulnerability that can affect confidentiality and integrity via unknown vectors. The vulnerability is listed alongside other Oracle CVEs in t...

CVE-2016-3488

CVE-2016-3488 affects Oracle Database Server 12.1.0.2, specifically the DB Sharding component. The available connected sources confirm an unspecified vulnerability that local users can impact integrity via unknown vectors. The documentation does not specify the exact root cause, affected subcompo...

CVE-2016-0691

Oracle Database Server, RDBMS Security component (versions 11.2.0.4, 12.1.0.1, 12.1.0.2) is affected by CVE-2016-0691, a local vulnerability that can allow an unprivileged or low-privilege local user to compromise integrity via unknown vectors. The provided documents confirm the component and aff...

CVE-2016-3454

Technical details about CVE-2016-3454 are not publicly provided in the supplied documents. The available records describe an unspecified Java VM vulnerability in Oracle Database Server without concrete affected versions, root cause, or fixes. Monitor for future updates.

CVE-2016-5572

CVE-2016-5572 affects Oracle Database Server 12.1.0.2, specifically the Kernel PDB component. The vulnerability is described as local and could impact confidentiality, integrity, and availability via unknown vectors. Connected sources identify the issue within the Kernel PDB, but do not provide e...

CVE-2016-0690

CVE-2016-0690 : An unspecified vulnerability in the Oracle Database Server’s RDBMS Security component affects versions 11.2.0.4, 12.1.0.1, and 12.1.0.2, permitting local attackers to impact integrity via unknown vectors. The connected documents describe it as an unspecified flaw with no concrete ...

CVE-2016-5497

CVE-2016-5497 affects Oracle Database Server 12.1.0.2 in the RDBMS Security component. It enables a local attacker to affect confidentiality, integrity, and availability via unknown vectors. CVSSv3: 6.4 (LOCAL, high complexity, high privileges). Remediation: Oracle CPU October 2016 patch update i...

CVE-2016-3479

CVE-2016-3479 affects Oracle Database Server Portable Clusterware in 11.2.0.4 and 12.1.0.2. The vulnerability is described as unspecified but allows remote attackers to affect availability via unknown vectors. It is listed with CVSS v3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and CV...