# CVEs published 2013-01-17

93 CVEs were published on January 17, 2013: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-3310](https://cve.now/CVE-2012-3310.md): IBM Tivoli Federated Identity Manager (TFIM) before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attac (no CVSS)
- [CVE-2012-4607](https://cve.now/CVE-2012-4607.md): Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbit (no CVSS)
- [CVE-2012-5429](https://cve.now/CVE-2012-5429.md): The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of serv (no CVSS)
- [CVE-2013-0172](https://cve.now/CVE-2013-0172.md): Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries t (no CVSS)
- [CVE-2012-4689](https://cve.now/CVE-2012-4689.md): Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process System (no CVSS)
- [CVE-2012-5972](https://cve.now/CVE-2012-5972.md): SpecView Directory Traversal (no CVSS, SpecView)
- [CVE-2012-5419](https://cve.now/CVE-2012-5419.md): Cisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a (no CVSS)
- [CVE-2012-5444](https://cve.now/CVE-2012-5444.md): Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to (no CVSS)
- [CVE-2012-6392](https://cve.now/CVE-2012-6392.md): Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in (no CVSS)
- [CVE-2012-6397](https://cve.now/CVE-2012-6397.md): Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-1109](https://cve.now/CVE-2013-1109.md): Cross-site request forgery (CSRF) vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Ce (no CVSS)
- [CVE-2012-0569](https://cve.now/CVE-2012-0569.md): Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to In (no CVSS)
- [CVE-2012-0572](https://cve.now/CVE-2012-0572.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated user (no CVSS)
- [CVE-2012-0574](https://cve.now/CVE-2012-0574.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated us (no CVSS)
- [CVE-2012-0578](https://cve.now/CVE-2012-0578.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availabilit (no CVSS)
- [CVE-2012-1677](https://cve.now/CVE-2012-1677.md): Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to a (no CVSS)
- [CVE-2012-1678](https://cve.now/CVE-2012-1678.md): Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98, 9.1, and 24 allows remote auth (no CVSS)
- [CVE-2012-1680](https://cve.now/CVE-2012-1680.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2012-1700](https://cve.now/CVE-2012-1700.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2012-1701](https://cve.now/CVE-2012-1701.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2012-1702](https://cve.now/CVE-2012-1702.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affec (no CVSS)
- [CVE-2012-1705](https://cve.now/CVE-2012-1705.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated user (no CVSS)
- [CVE-2012-1755](https://cve.now/CVE-2012-1755.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote attackers to affect integ (no CVSS)
- [CVE-2012-3168](https://cve.now/CVE-2012-3168.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect avail (no CVSS)
- [CVE-2012-3169](https://cve.now/CVE-2012-3169.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability vi (no CVSS)
- [CVE-2012-3170](https://cve.now/CVE-2012-3170.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability vi (no CVSS)
- [CVE-2012-3172](https://cve.now/CVE-2012-3172.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect avail (no CVSS)
- [CVE-2012-3178](https://cve.now/CVE-2012-3178.md): Unspecified vulnerability in the kernel in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors. (no CVSS)
- [CVE-2012-3190](https://cve.now/CVE-2012-3190.md): Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12. (no CVSS)
- [CVE-2012-3192](https://cve.now/CVE-2012-3192.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated us (no CVSS)
- [CVE-2012-3218](https://cve.now/CVE-2012-3218.md): Unspecified vulnerability in the Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authentica (no CVSS)
- [CVE-2012-3219](https://cve.now/CVE-2012-3219.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2012-3220](https://cve.now/CVE-2012-3220.md): Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 (no CVSS)
- [CVE-2012-5059](https://cve.now/CVE-2012-5059.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to aff (no CVSS)
- [CVE-2012-5060](https://cve.now/CVE-2012-5060.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated user (no CVSS)
- [CVE-2012-5062](https://cve.now/CVE-2012-5062.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2012-5096](https://cve.now/CVE-2012-5096.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privilege (no CVSS)
- [CVE-2012-5097](https://cve.now/CVE-2012-5097.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3.0, 11.1.1.5.0, and 11.1.2.0.0 allows r (no CVSS)
- [CVE-2013-0352](https://cve.now/CVE-2013-0352.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0353](https://cve.now/CVE-2013-0353.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0354](https://cve.now/CVE-2013-0354.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0355](https://cve.now/CVE-2013-0355.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0356](https://cve.now/CVE-2013-0356.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to aff (no CVSS)
- [CVE-2013-0357](https://cve.now/CVE-2013-0357.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integ (no CVSS)
- [CVE-2013-0358](https://cve.now/CVE-2013-0358.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0359](https://cve.now/CVE-2013-0359.md): Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and (no CVSS)
- [CVE-2013-0360](https://cve.now/CVE-2013-0360.md): Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and (no CVSS)
- [CVE-2013-0361](https://cve.now/CVE-2013-0361.md): Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and (no CVSS)
- [CVE-2013-0362](https://cve.now/CVE-2013-0362.md): Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and (no CVSS)
- [CVE-2013-0363](https://cve.now/CVE-2013-0363.md): Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and (no CVSS)
- [CVE-2013-0364](https://cve.now/CVE-2013-0364.md): Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and (no CVSS)
- [CVE-2013-0365](https://cve.now/CVE-2013-0365.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2013-0366](https://cve.now/CVE-2013-0366.md): Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and (no CVSS)
- [CVE-2013-0367](https://cve.now/CVE-2013-0367.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availabilit (no CVSS)
- [CVE-2013-0368](https://cve.now/CVE-2013-0368.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availabilit (no CVSS)
- [CVE-2013-0369](https://cve.now/CVE-2013-0369.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated us (no CVSS)
- [CVE-2013-0370](https://cve.now/CVE-2013-0370.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote authentica (no CVSS)
- [CVE-2013-0371](https://cve.now/CVE-2013-0371.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availabilit (no CVSS)
- [CVE-2013-0372](https://cve.now/CVE-2013-0372.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1. (no CVSS)
- [CVE-2013-0373](https://cve.now/CVE-2013-0373.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0374](https://cve.now/CVE-2013-0374.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2. (no CVSS)
- [CVE-2013-0375](https://cve.now/CVE-2013-0375.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated us (no CVSS)
- [CVE-2013-0376](https://cve.now/CVE-2013-0376.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows rem (no CVSS)
- [CVE-2013-0377](https://cve.now/CVE-2013-0377.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 all (no CVSS)
- [CVE-2013-0378](https://cve.now/CVE-2013-0378.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via u (no CVSS)
- [CVE-2013-0379](https://cve.now/CVE-2013-0379.md): Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via u (no CVSS)
- [CVE-2013-0380](https://cve.now/CVE-2013-0380.md): Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows re (no CVSS)
- [CVE-2013-0381](https://cve.now/CVE-2013-0381.md): Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows r (no CVSS)
- [CVE-2013-0382](https://cve.now/CVE-2013-0382.md): Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows (no CVSS)
- [CVE-2013-0383](https://cve.now/CVE-2013-0383.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to aff (no CVSS)
- [CVE-2013-0384](https://cve.now/CVE-2013-0384.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated us (no CVSS)
- [CVE-2013-0385](https://cve.now/CVE-2013-0385.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect c (no CVSS)
- [CVE-2013-0386](https://cve.now/CVE-2013-0386.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availabilit (no CVSS)
- [CVE-2013-0387](https://cve.now/CVE-2013-0387.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated us (no CVSS)
- [CVE-2013-0388](https://cve.now/CVE-2013-0388.md): Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via (no CVSS)
- [CVE-2013-0389](https://cve.now/CVE-2013-0389.md): Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated us (no CVSS)
- [CVE-2013-0390](https://cve.now/CVE-2013-0390.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows rem (no CVSS)
- [CVE-2013-0391](https://cve.now/CVE-2013-0391.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to af (no CVSS)
- [CVE-2013-0392](https://cve.now/CVE-2013-0392.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to aff (no CVSS)
- [CVE-2013-0393](https://cve.now/CVE-2013-0393.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent a (no CVSS)
- [CVE-2013-0394](https://cve.now/CVE-2013-0394.md): Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote attackers to affect confi (no CVSS)
- [CVE-2013-0395](https://cve.now/CVE-2013-0395.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated us (no CVSS)
- [CVE-2013-0396](https://cve.now/CVE-2013-0396.md): Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and (no CVSS)
- [CVE-2013-0397](https://cve.now/CVE-2013-0397.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows rem (no CVSS)
- [CVE-2013-0399](https://cve.now/CVE-2013-0399.md): Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows local users to affect confidentiality, integrity, and availability via unkno (no CVSS)
- [CVE-2013-0400](https://cve.now/CVE-2013-0400.md): Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows local users to affect confidentiality, integrity, and availability via unkno (no CVSS)
- [CVE-2013-0407](https://cve.now/CVE-2013-0407.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DT (no CVSS)
- [CVE-2013-0414](https://cve.now/CVE-2013-0414.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Ut (no CVSS)
- [CVE-2013-0415](https://cve.now/CVE-2013-0415.md): Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2013-0417](https://cve.now/CVE-2013-0417.md): Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers (no CVSS)
- [CVE-2013-0418](https://cve.now/CVE-2013-0418.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent a (no CVSS)
- [CVE-2013-0420](https://cve.now/CVE-2013-0420.md): Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and (no CVSS)
- [CVE-2013-0632](https://cve.now/CVE-2013-0632.md): administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitr (CVSS 9.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.