CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-2655 – Oracle Application Express Cross Site Scripting
https://notcve.org/view.php?id=CVE-2015-2655
Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server en versiones anteriores a 4.2.3.00.08, permite a usuarios remotos autenticados afectar la confidencialidad e integridad a través de vectores desconocidos. The gReport Controls Sort Widget in Oracle Application Express is prone to permanent cross site scripting. The setting "display as" of the column attributes is ignored for the filter list. Versions prior to 4.2.3.00.08 are affected. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securityfocus.com/bid/75864 http://www.securitytracker.com/id/1032903 •
CVSS: 9.0EPSS: 0%CPEs: 5EXPL: 0CVE-2015-2629
https://notcve.org/view.php?id=CVE-2015-2629
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0457. Vulnerabilidad no especificada en el componente Java VM en Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1 y 12.1.0.2 permite a usuarios remotos autenticados afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2015-0457. • http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032903 •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2015-2647
https://notcve.org/view.php?id=CVE-2015-2647
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management. Vulnerabilidad no especificada en el componente Enterprise Manager for Oracle Database en Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; y EM DB Control 11.1.0.7, 11.2.0.3 y 11.2.0.4, permite a usuarios remotos autenticados afectar la confidencialidad e integridad a través de vectores desconocidos relacionados con Content Management. • http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032918 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-4755
https://notcve.org/view.php?id=CVE-2015-4755
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to affect confidentiality via unknown vectors. Vulnerabilidad no especificada en el componente RDBMS Security en Oracle Database Server 12.1.0.2, permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032903 •
CVSS: 6.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0468
https://notcve.org/view.php?id=CVE-2015-0468
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad no especificada en el componente Core RDBMS de Oracle Database Server 11.1.0.7, 11.2.0.3 y 12.1.0.1, permite a usuarios remotos autenticados afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. • http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032903 •