CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0511
https://notcve.org/view.php?id=CVE-2016-0511
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0547, CVE-2016-0548, and CVE-2016-0549. Vulnerabilidad no especificada en el componente Oracle E-Business Intelligence en Oracle E-Business Suite 11.5.10.2 permite a atacantes remotos afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con Common Components, una vulnerabilidad diferente a CVE-2016-0547, CVE-2016-0548 y CVE-2016-0549. • http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0516
https://notcve.org/view.php?id=CVE-2016-0516
Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration. Vulnerabilidad no especificada en el componente Oracle Quality en Oracle E-Business Suite 11.5.10.2 permite a atacantes remotos afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con QA / Order Management Integration. • http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0507
https://notcve.org/view.php?id=CVE-2016-0507
Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0519. Vulnerabilidad no especificada en el componente Oracle iReceivables en Oracle E-Business Suite 11.5.10.2 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos relacionados con AR Web Utilities, una vulnerabilidad diferente a CVE-2016-0519. • http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0509
https://notcve.org/view.php?id=CVE-2016-0509
Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AP Web Utilities. Vulnerabilidad no especificada en el componente Oracle Internet Expenses en Oracle E-Business Suite 11.5.10.2 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos relacionados con AP Web Utilities. • http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-0456
https://notcve.org/view.php?id=CVE-2016-0456
Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/copxmllcmservicecontroller.js. Vulnerabilidad no especificada en el Application Mgmt Pack para el componente E-Business Suite en Oracle E-Business Suite 12.1 y 12.2 permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con REST Framework, una vulnerabilidad diferente a CVE-2016-0457. NOTA: la información anterior es de la CPU de Enero de 2016. • http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 https://erpscan.io/advisories/erpscan-16-006-oracle-e-business-suite-xxe-injection-vulnerability •