ByteOS

cpe:2.3:a:hitachi:device_manager:*:*:*:*:*:*:*:*

>>device_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*

Oracle Corporation

>>solaris>>-

cpe:2.3:a:hitachi:compute_systems_manager:*:*:*:*:*:*:*:*

>>compute_systems_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:a:hitachi:automation_director:*:*:*:*:*:*:*:*

>>automation_director>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:a:hitachi:tiered_storage_manager:*:*:*:*:*:*:*:*

>>tiered_storage_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

>>windows>>-

cpe:2.3:a:hitachi:replication_manager:*:*:*:*:*:*:*:*

>>replication_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:a:hitachi:tuning_manager:*:*:*:*:*:*:*:*

>>tuning_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:a:hitachi:global_link_manager:*:*:*:*:*:*:*:*

>>global_link_manager>>Versions before 8.6.2-00(exclusive)

>>windows>>-

cpe:2.3:a:hitachi:infrastructure_analytics_advisor:*:*:*:*:*:*:*:*

>>infrastructure_analytics_advisor>>Versions before 4.2.0-00(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/	cve@mitre.org	Vendor Advisory
https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-128/	cve@mitre.org	Vendor Advisory

Hyperlink: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-128/

Source: cve@mitre.org

Resource:

Vendor Advisory

Similar CVEs

1661Records found

CVE-2020-14553

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.49% / 64.57%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:41

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2020-14692

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 47.56%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-26 Sep, 2024 | 20:42

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Loan Loss Forecasting and Provisioning accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Product-financial_services_loan_loss_forecasting_and_provisioning Financial Services Loan Loss Forecasting and Provisioning

CVE-2020-14708

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.20% / 42.36%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-26 Sep, 2024 | 20:38

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Customer Management and Segmentation Foundation accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Product-retail_customer_management_and_segmentation_foundation Retail Customer Management and Segmentation Foundation

CVE-2020-14693

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 47.56%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-26 Sep, 2024 | 20:41

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Accounting Analyzer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Insurance Accounting Analyzer accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Product-insurance_accounting_analyzer Insurance Accounting Analyzer

CVE-2015-0483

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.20% / 42.29%

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.

Product-database_server n/a

CVE-2020-14719

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-0.23% / 45.55%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-26 Sep, 2024 | 20:36

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities). Supported versions that are affected are 12.2.4-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Internet Expenses. While the vulnerability is in Oracle Internet Expenses, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Internet Expenses accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).

Product-internet_expenses Internet Expenses

CVE-2020-14564

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.7||LOW

EPSS-0.21% / 43.04%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:39

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Product-peoplesoft_enterprise_peopletools PeopleSoft Enterprise PT PeopleTools

CVE-2020-14860

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.7||LOW

EPSS-0.22% / 44.88%

7 Day CHG~0.00%

Published-21 Oct, 2020 | 14:04

Updated-26 Sep, 2024 | 20:09

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Vendor-NetApp, Inc.Oracle Corporation

Product-oncommand_insight active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

CVE-2015-0487

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.21% / 43.95%

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2015-0472.

CVE-2020-14551

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.20% / 42.36%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:41

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle AutoVue accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Product-autovue AutoVue 3D Professional Advanced

CVE-2020-14633

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.7||LOW

EPSS-0.36% / 57.53%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

CVE-2013-3766

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.19% / 40.88%

7 Day CHG~0.00%

Published-16 Oct, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.1, 8.2, and 8.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Access.

Product-primavera_products_suite n/a

CVE-2013-3824

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.38% / 58.60%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts.

Product-supply_chain_products_suite n/a

CVE-2013-3832

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.15% / 36.24%

7 Day CHG~0.00%

Published-16 Oct, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management.

Product-siebel_crm n/a

CVE-2013-3809

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.42% / 61.33%

7 Day CHG~0.00%

Published-17 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.

Vendor-n/a openSUSE SUSE MariaDB Foundation Oracle Corporation Canonical Ltd.

Product-solaris mariadb mysql opensuse ubuntu_linux linux_enterprise_desktop linux_enterprise_server linux_enterprise_software_development_kit n/a

CVE-2014-6597

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.15% / 36.24%

7 Day CHG~0.00%

Published-21 Jan, 2015 | 15:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.

CVE-2014-6566

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.15% / 36.24%

7 Day CHG~0.00%

Published-21 Jan, 2015 | 15:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal.

CVE-2008-2621

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-0.38% / 58.44%

7 Day CHG~0.00%

Published-15 Jul, 2008 | 23:00

Updated-07 Aug, 2024 | 09:05

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2622.

Product-jd_edwards_enterpriseone peoplesoft_enterprise peoplesoft_peopletools_component n/a

CVE-2013-2441

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.13% / 33.68%

7 Day CHG~0.00%

Published-17 Apr, 2013 | 14:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to Java Client.

Product-supply_chain_products_suite n/a

CVE-2021-41337

Matching Score-8

Matching Score-8

CVSS Score-4.9||MEDIUM

EPSS-0.52% / 65.98%

7 Day CHG~0.00%

Published-13 Oct, 2021 | 00:27

Updated-04 Aug, 2024 | 03:08

Active Directory Security Feature Bypass Vulnerability

Product-windows_server_2016 windows_server_2019 windows_server_2022 Windows Server 2022 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows Server 2016 (Server Core installation)Windows Server 2019 Windows Server version 20H2 Windows Server 2016

CVE-2013-1509

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-16.01% / 94.52%

7 Day CHG~0.00%

Published-17 Apr, 2013 | 05:04

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.

Product-fusion_middleware n/a

CVE-2021-40460

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.85% / 74.03%

7 Day CHG~0.00%

Published-13 Oct, 2021 | 00:26

Updated-04 Aug, 2024 | 02:44

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

CVE-2025-48802

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.06% / 18.99%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 16:57

Updated-23 Aug, 2025 | 00:39

Windows SMB Server Spoofing Vulnerability

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

Product-windows_11_23h2 windows_server_2022 windows_server_2022_23h2 windows_11_22h2 Windows 11 version 22H2 Windows 11 Version 23H2 Windows Server 2022 Windows 11 version 22H3 Windows Server 2022, 23H2 Edition (Server Core installation)

CWE ID-CWE-295

Improper Certificate Validation

CVE-2013-0544

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-0.46% / 63.01%

7 Day CHG~0.00%

Published-24 Apr, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.

Vendor-n/a IBM Corporation Linux Kernel Organization, Inc

Product-websphere_application_server linux_kernel n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2013-0395

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.15% / 36.24%

7 Day CHG~0.00%

Published-17 Jan, 2013 | 01:30

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Security.

CVE-2020-10659

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.12% / 32.29%

7 Day CHG~0.00%

Published-18 Mar, 2020 | 01:40

Updated-04 Aug, 2024 | 11:06

Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.

Vendor-entrustdatacard n/a Microsoft Corporation

Product-windows entelligence_security_provider n/a

CWE ID-CWE-295

Improper Certificate Validation

CVE-2017-3488

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.31% / 53.29%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Product-flexcube_investor_servicing FLEXCUBE Investor Servicing

CVE-2017-3651

Matching Score-8

Assigner-Oracle

Product-enterprise_linux_desktop enterprise_linux_server_tus enterprise_linux_eus enterprise_linux_workstation mariadb debian_linux enterprise_linux_server mysql enterprise_linux_server_aus openstack MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.30% / 52.71%

7 Day CHG+0.03%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation MariaDB Foundation

CVE-2017-3465

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.28% / 51.28%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Product-mysql MySQL Server

CVE-2021-36940

Matching Score-8

Matching Score-8

CVSS Score-7.6||HIGH

EPSS-0.97% / 75.72%

7 Day CHG~0.00%

Published-12 Aug, 2021 | 18:12

Updated-04 Aug, 2024 | 01:09

Microsoft SharePoint Server Spoofing Vulnerability

Product-sharepoint_server sharepoint_enterprise_server Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1

CVE-2012-3141

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.19% / 41.28%

7 Day CHG~0.00%

Published-16 Oct, 2012 | 23:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability than CVE-2012-3227.

Product-financial_services_software n/a

CVE-2021-39017

Matching Score-8

Assigner-IBM Corporation

Product-engineering_lifecycle_optimization_-_publishing engineering_lifecycle_optimization_publishing windows linux_kernel Engineering Lifecycle Optimization Publishing

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.7||MEDIUM

EPSS-0.11% / 30.41%

7 Day CHG~0.00%

Published-14 Jul, 2022 | 16:15

Updated-25 Mar, 2025 | 14:21

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725.

Vendor-IBM Corporation Microsoft Corporation Linux Kernel Organization, Inc

CVE-2021-38624

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.47% / 63.70%

7 Day CHG~0.00%

Published-15 Sep, 2021 | 11:23

Updated-04 Aug, 2024 | 01:44

Windows Key Storage Provider Security Feature Bypass Vulnerability

Product-windows_server_2016 windows_server_2019 windows_server_2022 windows_10 Windows Server 2022 Windows 10 Version 2004 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows 10 Version 21H1 Windows 10 Version 1809 Windows 11 version 21H2 Windows Server 2019 Windows Server version 20H2 Windows 10 Version 1909 Windows 10 Version 20H2

CWE ID-CWE-639

Authorization Bypass Through User-Controlled Key

CVE-2012-1674

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.24% / 47.18%

7 Day CHG~0.00%

Published-03 May, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582.

Product-industry_applications n/a

CVE-2023-40363

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-8.1||HIGH

EPSS-0.04% / 9.66%

7 Day CHG~0.00%

Published-18 Nov, 2023 | 17:14

Updated-21 Nov, 2024 | 18:55

IBM InfoSphere Information Server privilege escalation

IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-aix windows infosphere_information_server linux_kernel InfoSphere Information Server

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2012-0582

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.28% / 50.88%

7 Day CHG~0.00%

Published-03 May, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-industry_applications n/a

CVE-2021-35630

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-0.16% / 36.93%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 10:51

Updated-25 Sep, 2024 | 19:23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).

Vendor-NetApp, Inc.Oracle Corporation

Product-oncommand_insight mysql snapcenter MySQL Server

CVE-2012-0534

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.19% / 41.28%

7 Day CHG~0.00%

Published-03 May, 2012 | 17:18

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.

Product-database_server n/a

CVE-2023-36871

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.26% / 49.28%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 17:03

Updated-01 Jan, 2025 | 01:53

Azure Active Directory Security Feature Bypass Vulnerability

CVE-2011-3514

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.15% / 36.24%

7 Day CHG~0.00%

Published-18 Jan, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC (JDENET).

Product-jd_edwards_products jd_edwards_enterpriseone_tools n/a

CVE-2023-35348

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.44% / 62.21%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 17:02

Updated-01 Jan, 2025 | 01:52

Active Directory Federation Service Security Feature Bypass Vulnerability

Product-windows_server_2016 windows_server_2019 windows_server_2022 Windows Server 2022 Windows Server 2019 (Server Core installation)Windows Server 2016 (Server Core installation)Windows Server 2019 Windows Server 2016

CWE ID-CWE-522

Insufficiently Protected Credentials

CVE-2011-2280

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-0.29% / 52.12%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49.31, 8.50.20, and 8.51.11 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2011-2274.

Product-peoplesoft_enterprise_peopletools peoplesoft_products n/a

CVE-2023-33142

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-1.72% / 81.61%

7 Day CHG~0.00%

Published-13 Jun, 2023 | 23:26

Updated-28 Feb, 2025 | 20:02

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition

CWE ID-CWE-285

Improper Authorization

CVE-2022-21382

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-0.36% / 57.05%

7 Day CHG-0.07%

Published-19 Jan, 2022 | 11:26

Updated-24 Sep, 2024 | 20:16

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. While the vulnerability is in Oracle Enterprise Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).

Product-enterprise_session_border_controller Enterprise Session Border Controller

CVE-2019-2730

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.7||LOW

EPSS-0.32% / 54.80%

7 Day CHG~0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:45

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Product-mysql MySQL Server

CVE-2023-27859

Matching Score-8

Assigner-IBM Corporation

Vendor-Oracle Corporation HP Inc.Linux Kernel Organization, Inc Microsoft Corporation IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.11% / 29.37%

7 Day CHG~0.00%

Published-22 Jan, 2024 | 20:02

Updated-20 Jun, 2025 | 19:15

IBM Db2 code execution

IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by installing a malicious jar file that overwrites the existing like named jar file in another database. IBM X-Force ID: 249205.

Product-linux_kernel aix linux_on_ibm_z windows solaris hp-ux db2 Db2 for Linux, UNIX and Windows

CWE ID-CWE-427

Uncontrolled Search Path Element

CVE-2019-2533

Matching Score-8

Assigner-Oracle

Product-software_collections enterprise_linux_server_aus enterprise_linux storage_automation_store enterprise_linux_eus oncommand_workflow_automation enterprise_linux_server_tus oncommand_unified_manager mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.35% / 56.92%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 19:00

Updated-02 Oct, 2024 | 16:03

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Vendor-Red Hat, Inc.NetApp, Inc.Oracle Corporation

CVE-2017-10150

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.40% / 60.21%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Product-primavera_unifier Primavera Unifier

CVE-2017-10091

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-0.49% / 64.63%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. While the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).

Product-enterprise_manager_base_platform Enterprise Manager Base Platform

CVE-2017-10217

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.40% / 60.21%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Guest Access accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).