ByteOS

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.15%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 15:50

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-20191

Matching Score-8

Assigner-Red Hat, Inc.

Product-cisco_nx-os_collection virtualization google_cloud_platform_ansible_collection community_general_collection ansible docker_community_collection community_network_collection ansible_tower ansible

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 11.15%

||

7 Day CHG~0.00%

Published-26 May, 2021 | 00:00

Updated-03 Aug, 2024 | 17:30

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.

Vendor-n/a Oracle Corporation Red Hat, Inc.

CWE ID-CWE-532

Insertion of Sensitive Information into Log File

CVE-2016-2178

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.21% / 42.62%

||

7 Day CHG~0.00%

Published-20 Jun, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

Vendor-n/a Node.js (OpenJS Foundation)SUSE OpenSSL Debian GNU/Linux Oracle Corporation Canonical Ltd.

Product-solaris ubuntu_linux openssl debian_linux linux linux_enterprise node.js n/a

CWE ID-CWE-203

Observable Discrepancy

CVE-2021-2042

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.3||LOW

EPSS-0.10% / 28.02%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:36

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Vendor-NetApp, Inc.Oracle Corporation

Product-oncommand_insight mysql oncommand_workflow_automation snapcenter MySQL Server

CVE-2016-0446

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 36.63%

||

7 Day CHG~0.00%

Published-21 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality via unknown vectors related to Agent Next Gen.

Product-enterprise_manager_grid_control n/a

CVE-2020-8908

Matching Score-8

Assigner-Google LLC

Product-guava peoplesoft_enterprise_peopletools communications_cloud_native_core_network_slice_selection_function weblogic_server communications_pricing_design_center quarkus primavera_unifier nosql_database communications_cloud_native_core_network_repository_function active_iq_unified_manager commerce_guided_search retail_customer_management_and_segmentation_foundation data_integrator Guava

Matching Score-8

Assigner-Google LLC

CVSS Score-3.3||LOW

EPSS-0.07% / 21.88%

||

7 Day CHG~0.00%

Published-10 Dec, 2020 | 22:10

Updated-04 Aug, 2024 | 10:12

Temp directory permission issue in Guava

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.

Vendor-quarkus NetApp, Inc.Google LLC Oracle Corporation

CWE ID-CWE-378

Creation of Temporary File With Insecure Permissions

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2021-2353

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.19% / 40.43%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:43

Updated-26 Sep, 2024 | 14:03

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Product-siebel_core_-_server_framework Siebel Core - Server Framework

CVE-2021-2266

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.07% / 21.89%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:47

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2280

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.15% / 36.14%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:47

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2321

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.16% / 36.60%

||

7 Day CHG~0.00%

Published-28 Apr, 2021 | 21:00

Updated-26 Sep, 2024 | 14:08

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-2306

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.07% / 20.13%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:54

Updated-26 Sep, 2024 | 14:10

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2019-3031

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.13% / 32.15%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:41

Updated-01 Oct, 2024 | 17:38

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2283

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.18% / 39.85%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:46

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2015-4753

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.42% / 61.40%

||

7 Day CHG~0.00%

Published-16 Jul, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the RDBMS Support Tools component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.

Product-database_server n/a

CVE-2019-2553

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.8||LOW

EPSS-0.10% / 27.18%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 15:51

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

CVE-2020-4629

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-2.9||LOW

EPSS-0.04% / 12.52%

||

7 Day CHG~0.00%

Published-30 Sep, 2020 | 14:35

Updated-16 Sep, 2024 | 23:15

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-209

Generation of Error Message Containing Sensitive Information

CVE-2019-2678

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 35.39%

||

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:41

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2019-2451

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.49%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:13

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2727

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.14% / 33.28%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:48

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2894

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.12% / 30.70%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2006-4031

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-2.1||LOW

EPSS-0.24% / 45.96%

||

7 Day CHG~0.00%

Published-09 Aug, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

Vendor-mysql n/a Oracle Corporation

Product-mysql n/a

CVE-2020-2681

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.59%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:55

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2748

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.2||LOW

EPSS-0.13% / 32.25%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2743

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.15% / 35.62%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2741

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.15% / 35.62%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2705

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.59%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:52

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2690

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.54% / 67.03%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2692

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.59%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2691

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.42% / 61.17%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2015-2574

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 37.20%

||

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities.

Product-solaris n/a

CVE-2015-4801

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 36.93%

||

7 Day CHG~0.00%

Published-21 Oct, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones.

Product-solaris n/a

CVE-2019-2969

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.2||MEDIUM

EPSS-0.38% / 58.63%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2019-3026

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.97%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-17521

Matching Score-8

Matching Score-8

CVSS Score-5.5||MEDIUM

EPSS-1.79% / 82.42%

||

7 Day CHG~0.00%

Published-07 Dec, 2020 | 19:22

Updated-04 Aug, 2024 | 14:00

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.

Vendor-NetApp, Inc.The Apache Software Foundation Oracle Corporation

CVE-2015-2579

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.17% / 38.31%

||

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health Sciences Applications 8.0 allows local users to affect confidentiality via vectors related to BIP Installer.

Product-health_sciences_applications n/a

CVE-2011-3564

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.06% / 17.32%

||

7 Day CHG~0.00%

Published-18 Jan, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.

Product-sun_glassfish_enterprise_server n/a

CVE-2016-0454

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 36.63%

||

7 Day CHG~0.00%

Published-21 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager.

Product-e-business_suite n/a

CVE-2019-12415

Matching Score-8

Matching Score-8

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 5.73%

||

7 Day CHG~0.00%

Published-23 Oct, 2019 | 19:27

Updated-04 Aug, 2024 | 23:17

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

Vendor-n/a The Apache Software Foundation Oracle Corporation

CWE ID-CWE-611

Improper Restriction of XML External Entity Reference

CVE-2019-11135

Matching Score-8

Assigner-Intel Corporation

Vendor-n/a Intel Corporation Oracle Corporation Fedora Project Canonical Ltd.Slackware HP Inc.Debian GNU/Linux Red Hat, Inc.openSUSE

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.32% / 54.47%

||

7 Day CHG~0.00%

Published-14 Nov, 2019 | 18:19

Updated-04 Aug, 2024 | 22:48

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

CVE-2018-2577

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.22% / 44.03%

||

7 Day CHG~0.00%

Published-18 Jan, 2018 | 02:00

Updated-03 Oct, 2024 | 20:45

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-solaris Solaris Operating System

CVE-2022-0001

Matching Score-8

Assigner-Intel Corporation

Product-celeron_g5900t xeon_gold_5215 core_i3-10100 core_i5-11400 core_i9-7900x celeron_j4125 core_i7-10510y xeon_d1700 core_i7-12650h xeon_platinum_8260y core_i9-7920x xeon_platinum_8352v celeron_n4120 xeon_w-11865mre core_i9-9960x core_i5-11600k core_i9-10900te xeon_e-2374g xeon_gold_5218t xeon_platinum_8358 xeon_platinum_8353h xeon_e-2378 core_i5-11260h core_i7-7820x xeon_platinum_8360y core_i3-1115g4e core_i5-10600t xeon_gold_5218n pentium_gold_g6605 core_i7-7800x xeon_w-3275m xeon_gold_6336y xeon_gold_6250l core_i5-9400h xeon_gold_6209u core_i9-9920x pentium_gold_g6505t xeon_e-2278ge xeon_platinum_8253 celeron_g5925 xeon_silver_4214y pentium_gold_g6505 xeon_w-10855m xeon_gold_6252n core_i9-11900kf xeon_gold_6230t xeon_silver_4210r xeon_w-1270 core_i3-l13g4 pentium_gold_g6400 xeon_w-3235 pentium_gold_g6500t core_i9-10900t xeon_platinum_8280 core_i5-8200y core_i7-10700te core_i9-10900k pentium_j6425 atom_x6425re xeon_gold_5220r xeon_w-11155mre xeon_gold_6252 core_i3-10105 core_i5-11400t celeron_n4020 xeon_d2700 core_i7-11700k core_i5-11400f core_i7-12700kf core_i5-10400t xeon_w-11955m xeon_w-1290e xeon_gold_6246 xeon_silver_4214r core_i7-1185g7 core_i7-9700kf core_i9-10940x celeron_6600he core_i9-9800x core_i9-10900x core_i5-12400f xeon_platinum_9221 xeon_gold_6230r xeon_platinum_8360hl celeron_j4105 core_i7-10700kf xeon_silver_4310t celeron_g5905 core_i7-1065g7 core_i9-11900k xeon_w-11555mre core_i9-12900hk xeon_silver_4208 core_i5-12450h xeon_gold_5318h pentium_gold_g7400t core_i5-10600kf core_i3-1000g1 celeron_g6900 xeon_w-2225 xeon_silver_4314 core_i3-1005g1 core_i9-10850h pentium_n6415 celeron_n4504 xeon_gold_5215l core_i3-1220p core_i5-12400t core_i5-9400f core_i7-12700t xeon_platinum_8352s core_i9-12900 core_i7-10700 xeon_gold_6238 atom_x6413e celeron_j6413 core_i5-11600kf core_i5-12500 core_i5-8365u xeon_platinum_8376h xeon_w-2245 core_i5-1145gre xeon_w-3265m xeon_gold_6240l xeon_gold_6248 core_i5-1135g7 core_i7-12700 xeon_w-1270p core_i3-1115g4 xeon_gold_6258r core_i5-9600kf xeon_platinum_8256 communications_cloud_native_core_binding_support_function xeon_platinum_9282 core_i5-10400 xeon_w-1250p pentium_gold_g7400 core_i3-1120g4 core_i5-1155g7 xeon_w-11865mld core_i7-9700k core_i5-11400h xeon_gold_6338n core_i9-11900h xeon_gold_6328hl core_i7-12700f core_i7-1185g7e core_i3-1110g4 core_i3-12100f core_i3-12100t core_i7-10810u core_i3-10300t xeon_gold_6330 xeon_bronze_3206r xeon_gold_6346 xeon_w-3275 core_i5-1130g7 xeon_gold_6240 core_i7-10700e xeon_gold_5220 core_i7-1260p celeron_g5305u core_i9-11900 core_i5-9600k core_i5-8265u core_i3-10100te atom_p5921b core_i7-10700t core_i9-9900kf celeron_g5205u xeon_e-2388g communications_cloud_native_core_network_exposure_function core_i7-11390h xeon_platinum_8268 core_i5-1145g7 celeron_g5905t core_i5-9300h core_i7-10750h core_i9-10850k xeon_gold_6240r xeon_gold_6330h pentium_gold_g6405 xeon_silver_4209t core_i7-7640x xeon_gold_6338 xeon_gold_5315y core_i9-12900f xeon_e-2278g xeon_silver_4215r xeon_gold_6212u core_i9-10900e pentium_gold_g6400t celeron_g6900t pentium_silver_n6005 core_i9-11980hk atom_p5931b xeon_platinum_8380 core_i9-11900f xeon_w-3265 xeon_silver_4215 xeon_platinum_8368 xeon_gold_6230n core_i5-10500te core_i9-10920x core_i5-11500 core_i9-11950h core_i7-11700 core_i5-10500t core_i5-10600 core_i7-1195g7 core_i9-10885h celeron_n4500 xeon_gold_6338t core_i5-10310y xeon_platinum_8352m xeon_e-2386g core_i7-1165g7 core_i3-12300 xeon_gold_6208u celeron_6305 core_i7-11850he xeon_w-1290te pentium_gold_g6405u core_i5-1145g7e xeon_gold_6242 core_i7-10700k core_i3-12300t xeon_e-2336 core_i5-1030g7 celeron_j4025 core_i9-10980hk xeon_platinum_8360h xeon_e-2286m core_i9-9880h xeon_w-11155mle xeon_silver_4210t core_i7-11370h xeon_gold_5320t celeron_n4100 xeon_w-1300 core_i5-11500h core_i5-1035g4 core_i5-l16g7 core_i9-12900k core_i5-11600t xeon_gold_6342 core_i7-1280p core_i7-8500y core_i5-10200h core_i9-9900k pentium_silver_n5030 xeon_platinum_8276 pentium_silver_j5040 xeon_silver_4316 core_i9-7960x xeon_gold_5220t celeron_n4000 core_i5-10400f core_i5-12600kf core_i7-1160g7 celeron_n6211 xeon_w-1370 xeon_gold_6244 xeon_gold_6242r xeon_gold_6330n xeon_w-2275 xeon_w-10855 xeon_w-2265 xeon_gold_6226r core_i5-12600t core_i9-12900kf xeon_bronze_3204 core_i9-9820x celeron_j4005 xeon_gold_5218b xeon_platinum_8354h pentium_silver_n5000 xeon_gold_6348h xeon_gold_6328h core_i7-9750hf core_i7-1180g7 core_i5-12400 xeon_e-2288g xeon_w-1370p xeon_gold_6254 core_i3-10320 xeon_gold_5218r xeon_gold_6334 core_i5-1035g7 xeon_gold_6326 core_i3-10105f xeon_w-11855m xeon_gold_5320 xeon_w-2235 xeon_gold_6240y celeron_g5900 atom_p5962b xeon_gold_6238l xeon_w-1390 core_i7-10875h xeon_w-3225 core_i3-1115gre core_i5-11600 xeon_gold_6348 core_i7-11700f core_i3-11100he core_i5-10400h atom_x6212re pentium_gold_7505 xeon_gold_6246r celeron_n5105 core_i7-12700k core_i7-8665u xeon_gold_6354 core_i7-1270p core_i3-10305t xeon_w-10885m core_i9-9940x xeon_gold_6312u xeon_gold_5320h core_i9-9900x core_i5-10600k core_i9-7940x core_i5-10110y xeon_gold_5222 core_i7-10850h core_i5-12600h xeon_platinum_8380hl xeon_gold_6256 xeon_gold_6248r xeon_silver_4214 core_i7-12700h atom_x6425e xeon_gold_5318n xeon_platinum_9222 core_i3-10105t core_i5-11300h xeon_gold_5220s xeon_platinum_8260 core_i3-1000g4 pentium_silver_n6000 xeon_platinum_8280l xeon_silver_4309y core_i9-10900kf core_m3-8100y xeon_platinum_8356h atom_p5942b core_i3-10100t pentium_gold_g6600 xeon_gold_6314u core_i9-9980hk xeon_w-11555mle core_i5-12500h core_i7-11700t xeon_w-1390t xeon_silver_4216 xeon_platinum_9242 core_i5-1140g7 core_i7-11700kf core_i7-10610u xeon_platinum_8362 xeon_platinum_8276l xeon_w-2223 core_i7-7740x core_i7-11375h xeon_gold_6238t core_i5-11500t core_i9-11900t core_i5-8210y xeon_platinum_8368q atom_x6427fe core_i7-1060g7 core_i5-9400 xeon_gold_5318y core_i7-1185gre xeon_silver_4310 core_i3-10325 xeon_e-2356g xeon_gold_6250 celeron_6305e xeon_platinum_8260l celeron_n5100 xeon_platinum_8380h xeon_platinum_8270 xeon_w-1290t xeon_w-3245m xeon_gold_6226 core_i5-11320h core_i5-12600 xeon_e-2334 xeon_gold_5318s core_i7-9850h xeon_w-1350 xeon_e-2314 core_i3-10305 core_i5-1035g1 core_i7-11850h xeon_w-1290 xeon_w-1390p xeon_silver_4210 core_i3-10110u core_i5-10505 xeon_gold_6234 core_i3-12100 xeon_w-2255 xeon_gold_6262v core_i7-10710u xeon_w-1350p core_i5-10210y core_i9-10900 xeon_w-1250 core_i5-10300h xeon_platinum_8358p core_i9-12900h xeon_gold_5218 atom_x6211e pentium_gold_g6500 core_i7-11800h celeron_5305u xeon_gold_6238r core_i3-10300 core_i9-10900f core_i3-1125g4 celeron_g5920 xeon_e-2278gel core_i7-8565u core_i5-1030g4 xeon_e-2378g core_i5-12600k communications_cloud_native_core_policy core_i5-1240p core_i7-10870h xeon_platinum_8352y core_i3-10100f core_i7-10510u xeon_w-1290p xeon_w-3223 xeon_gold_5317 core_i7-12800h core_i5-12500t core_i5-8310y core_i9-12900t xeon_gold_5217 xeon_e-2324g xeon_w-3245 xeon_platinum_8376hl atom_x6200fe xeon_gold_6210u xeon_gold_6222v core_i5-1250p core_i7-10700f core_i5-10210u xeon_w-2295 core_i5-10500 xeon_platinum_8351n xeon_gold_6230 pentium_silver_j5005 pentium_gold_g6405t Intel(R) Processors

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.38% / 58.61%

||

7 Day CHG+0.01%

Published-11 Mar, 2022 | 00:00

Updated-05 May, 2025 | 17:17

Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Vendor-n/a Oracle Corporation Intel Corporation

CVE-2022-21394

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.58%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:26

Updated-24 Sep, 2024 | 20:15

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2022-21461

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 28.73%

||

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:37

Updated-24 Sep, 2024 | 20:09

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-solaris Solaris Operating System

CVE-2022-21268

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.07% / 21.07%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:29

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Product-communications_billing_and_revenue_management Communications Billing and Revenue Management

CVE-2022-21295

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.8||LOW

EPSS-0.05% / 14.72%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-24 Sep, 2024 | 20:26

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

CVE-2017-10351

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.2||MEDIUM

EPSS-0.19% / 40.49%

||

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Product-peoplesoft_enterprise_peopletools PeopleSoft Enterprise PT PeopleTools

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2019-4719

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.1||MEDIUM

EPSS-0.09% / 25.64%

||

7 Day CHG~0.00%

Published-16 Mar, 2020 | 15:25

Updated-16 Sep, 2024 | 18:49

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data.

Product-solaris linux_kernel mq_appliance websphere_mq hp-ux windows mq aix MQ

CVE-2019-2574

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 35.39%

||

7 Day CHG~0.00%

Published-23 Apr, 2019 | 18:16

Updated-02 Oct, 2024 | 15:49

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2019-2555

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.49%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 15:50

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2019-2506

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.8||LOW

EPSS-0.11% / 30.13%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:05

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).