# CVEs published 2015-07-16

172 CVEs were published on July 16, 2015: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-0725](https://cve.now/CVE-2015-0725.md): Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite (no CVSS)
- [CVE-2015-4528](https://cve.now/CVE-2015-4528.md): Cross-site scripting (XSS) vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitra (no CVSS)
- [CVE-2015-4529](https://cve.now/CVE-2015-4529.md): Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manage (no CVSS)
- [CVE-2015-4460](https://cve.now/CVE-2015-4460.md): Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) all (no CVSS)
- [CVE-2015-4266](https://cve.now/CVE-2015-4266.md): The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly restrict use of IFRAME (no CVSS)
- [CVE-2015-4274](https://cve.now/CVE-2015-4274.md): Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote (no CVSS)
- [CVE-2015-4275](https://cve.now/CVE-2015-4275.md): The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote atta (no CVSS)
- [CVE-2015-4276](https://cve.now/CVE-2015-4276.md): Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID C (no CVSS)
- [CVE-2015-4278](https://cve.now/CVE-2015-4278.md): Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per- (no CVSS)
- [CVE-2015-5386](https://cve.now/CVE-2015-5386.md): Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via uns (no CVSS)
- [CVE-2015-5528](https://cve.now/CVE-2015-5528.md): Cross-site scripting (XSS) vulnerability in the save\_order function in class-floating-social-bar.php in the Floating Social Bar plugin befor (no CVSS)
- [CVE-2015-5529](https://cve.now/CVE-2015-5529.md): Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2015-5530](https://cve.now/CVE-2015-5530.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authent (no CVSS)
- [CVE-2015-1831](https://cve.now/CVE-2015-1831.md): The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" (no CVSS, org.apache.struts:struts2-core · org.apache.struts.xwork:xw…)
- [CVE-2015-3259](https://cve.now/CVE-2015-3259.md): Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges v (no CVSS)
- [CVE-2015-3449](https://cve.now/CVE-2015-3449.md): The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, which allows (no CVSS)
- [CVE-2015-3621](https://cve.now/CVE-2015-3621.md): Untrusted search path vulnerability in SAP Enterprise Central Component (ECC) allows local users to gain privileges via a Trojan horse progr (no CVSS)
- [CVE-2015-4637](https://cve.now/CVE-2015-4637.md): The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote a (no CVSS)
- [CVE-2015-5080](https://cve.now/CVE-2015-5080.md): The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before (no CVSS)
- [CVE-2015-5357](https://cve.now/CVE-2015-5357.md): The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X (no CVSS)
- [CVE-2015-5360](https://cve.now/CVE-2015-5360.md): IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, (no CVSS)
- [CVE-2015-5363](https://cve.now/CVE-2015-5363.md): The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46- (no CVSS)
- [CVE-2015-0443](https://cve.now/CVE-2015-0443.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-0444](https://cve.now/CVE-2015-0444.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-0445](https://cve.now/CVE-2015-0445.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-0446](https://cve.now/CVE-2015-0446.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-0467](https://cve.now/CVE-2015-0467.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 al (no CVSS)
- [CVE-2015-0468](https://cve.now/CVE-2015-0468.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated (no CVSS)
- [CVE-2015-1926](https://cve.now/CVE-2015-1926.md): Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle App (no CVSS)
- [CVE-2015-2580](https://cve.now/CVE-2015-2580.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4. (no CVSS)
- [CVE-2015-2581](https://cve.now/CVE-2015-2581.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affe (no CVSS)
- [CVE-2015-2582](https://cve.now/CVE-2015-2582.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2015-2583](https://cve.now/CVE-2015-2583.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2584](https://cve.now/CVE-2015-2584.md): Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 all (no CVSS)
- [CVE-2015-2585](https://cve.now/CVE-2015-2585.md): Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to aff (no CVSS)
- [CVE-2015-2586](https://cve.now/CVE-2015-2586.md): Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect avai (no CVSS)
- [CVE-2015-2587](https://cve.now/CVE-2015-2587.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect (no CVSS)
- [CVE-2015-2588](https://cve.now/CVE-2015-2588.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attac (no CVSS)
- [CVE-2015-2589](https://cve.now/CVE-2015-2589.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zon (no CVSS)
- [CVE-2015-2590](https://cve.now/CVE-2015-2590.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi (CVSS 9.8, KEV)
- [CVE-2015-2591](https://cve.now/CVE-2015-2591.md): Unspecified vulnerability in the PeopleSoft Enterprise Portal - Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote (no CVSS)
- [CVE-2015-2592](https://cve.now/CVE-2015-2592.md): Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 all (no CVSS)
- [CVE-2015-2593](https://cve.now/CVE-2015-2593.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to a (no CVSS)
- [CVE-2015-2594](https://cve.now/CVE-2015-2594.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3 (no CVSS)
- [CVE-2015-2595](https://cve.now/CVE-2015-2595.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to (no CVSS)
- [CVE-2015-2596](https://cve.now/CVE-2015-2596.md): Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot. (no CVSS)
- [CVE-2015-2597](https://cve.now/CVE-2015-2597.md): Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unkn (no CVSS)
- [CVE-2015-2598](https://cve.now/CVE-2015-2598.md): Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (no CVSS)
- [CVE-2015-2599](https://cve.now/CVE-2015-2599.md): Unspecified vulnerability in the RDBMS Scheduler component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 al (no CVSS)
- [CVE-2015-2600](https://cve.now/CVE-2015-2600.md): Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authentica (no CVSS)
- [CVE-2015-2601](https://cve.now/CVE-2015-2601.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attacker (no CVSS)
- [CVE-2015-2602](https://cve.now/CVE-2015-2602.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-2603](https://cve.now/CVE-2015-2603.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-2604](https://cve.now/CVE-2015-2604.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-2605](https://cve.now/CVE-2015-2605.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-2606](https://cve.now/CVE-2015-2606.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-2607](https://cve.now/CVE-2015-2607.md): Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3. (no CVSS)
- [CVE-2015-2609](https://cve.now/CVE-2015-2609.md): Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to CPU performance counte (no CVSS)
- [CVE-2015-2610](https://cve.now/CVE-2015-2610.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allow (no CVSS)
- [CVE-2015-2611](https://cve.now/CVE-2015-2611.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2015-2612](https://cve.now/CVE-2015-2612.md): Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers (no CVSS)
- [CVE-2015-2613](https://cve.now/CVE-2015-2613.md): Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidential (no CVSS)
- [CVE-2015-2614](https://cve.now/CVE-2015-2614.md): Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver (no CVSS)
- [CVE-2015-2615](https://cve.now/CVE-2015-2615.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, and 12.2.3 allows remote (no CVSS)
- [CVE-2015-2616](https://cve.now/CVE-2015-2616.md): Unspecified vulnerability in Oracle Sun Solaris 3.3 and 4.2 allows local users to affect availability via unknown vectors related to DevFS. (no CVSS)
- [CVE-2015-2617](https://cve.now/CVE-2015-2617.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect confidentiality, integrity, (no CVSS)
- [CVE-2015-2618](https://cve.now/CVE-2015-2618.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, a (no CVSS)
- [CVE-2015-2619](https://cve.now/CVE-2015-2619.md): Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affe (no CVSS)
- [CVE-2015-2620](https://cve.now/CVE-2015-2620.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confi (no CVSS)
- [CVE-2015-2621](https://cve.now/CVE-2015-2621.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect conf (no CVSS)
- [CVE-2015-2622](https://cve.now/CVE-2015-2622.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to a (no CVSS)
- [CVE-2015-2623](https://cve.now/CVE-2015-2623.md): Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Serv (no CVSS)
- [CVE-2015-2624](https://cve.now/CVE-2015-2624.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2625](https://cve.now/CVE-2015-2625.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attacker (no CVSS)
- [CVE-2015-2626](https://cve.now/CVE-2015-2626.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2627](https://cve.now/CVE-2015-2627.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors relat (no CVSS)
- [CVE-2015-2628](https://cve.now/CVE-2015-2628.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi (no CVSS)
- [CVE-2015-2629](https://cve.now/CVE-2015-2629.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2015-2630](https://cve.now/CVE-2015-2630.md): Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers (no CVSS)
- [CVE-2015-2631](https://cve.now/CVE-2015-2631.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via un (no CVSS)
- [CVE-2015-2632](https://cve.now/CVE-2015-2632.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors relat (no CVSS)
- [CVE-2015-2634](https://cve.now/CVE-2015-2634.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-2635](https://cve.now/CVE-2015-2635.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-2636](https://cve.now/CVE-2015-2636.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-2637](https://cve.now/CVE-2015-2637.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers (no CVSS)
- [CVE-2015-2638](https://cve.now/CVE-2015-2638.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers (no CVSS)
- [CVE-2015-2639](https://cve.now/CVE-2015-2639.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vector (no CVSS)
- [CVE-2015-2640](https://cve.now/CVE-2015-2640.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2641](https://cve.now/CVE-2015-2641.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-2643](https://cve.now/CVE-2015-2643.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2015-2644](https://cve.now/CVE-2015-2644.md): Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to (no CVSS)
- [CVE-2015-2645](https://cve.now/CVE-2015-2645.md): Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, (no CVSS)
- [CVE-2015-2646](https://cve.now/CVE-2015-2646.md): Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform (no CVSS)
- [CVE-2015-2647](https://cve.now/CVE-2015-2647.md): Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform (no CVSS)
- [CVE-2015-2648](https://cve.now/CVE-2015-2648.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2015-2649](https://cve.now/CVE-2015-2649.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users (no CVSS)
- [CVE-2015-2650](https://cve.now/CVE-2015-2650.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authe (no CVSS)
- [CVE-2015-2651](https://cve.now/CVE-2015-2651.md): Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualiz (no CVSS)
- [CVE-2015-2652](https://cve.now/CVE-2015-2652.md): Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, an (no CVSS)
- [CVE-2015-2653](https://cve.now/CVE-2015-2653.md): Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3. (no CVSS)
- [CVE-2015-2654](https://cve.now/CVE-2015-2654.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2655](https://cve.now/CVE-2015-2655.md): Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated user (no CVSS)
- [CVE-2015-2656](https://cve.now/CVE-2015-2656.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-2657](https://cve.now/CVE-2015-2657.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 throug (no CVSS)
- [CVE-2015-2658](https://cve.now/CVE-2015-2658.md): Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentialit (no CVSS)
- [CVE-2015-2659](https://cve.now/CVE-2015-2659.md): Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vector (no CVSS)
- [CVE-2015-2660](https://cve.now/CVE-2015-2660.md): Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to (no CVSS)
- [CVE-2015-2661](https://cve.now/CVE-2015-2661.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unknown vectors related to (no CVSS)
- [CVE-2015-2662](https://cve.now/CVE-2015-2662.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to DHCP Server. (no CVSS)
- [CVE-2015-2663](https://cve.now/CVE-2015-2663.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 throug (no CVSS)
- [CVE-2015-2664](https://cve.now/CVE-2015-2664.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2015-3244](https://cve.now/CVE-2015-3244.md): The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPo (no CVSS)
- [CVE-2015-4727](https://cve.now/CVE-2015-4727.md): Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrit (no CVSS)
- [CVE-2015-4728](https://cve.now/CVE-2015-4728.md): Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remo (no CVSS)
- [CVE-2015-4729](https://cve.now/CVE-2015-4729.md): Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vector (no CVSS)
- [CVE-2015-4731](https://cve.now/CVE-2015-4731.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers t (no CVSS)
- [CVE-2015-4732](https://cve.now/CVE-2015-4732.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi (no CVSS)
- [CVE-2015-4733](https://cve.now/CVE-2015-4733.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi (no CVSS)
- [CVE-2015-4735](https://cve.now/CVE-2015-4735.md): Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform (no CVSS)
- [CVE-2015-4736](https://cve.now/CVE-2015-4736.md): Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via (no CVSS)
- [CVE-2015-4737](https://cve.now/CVE-2015-4737.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect con (no CVSS)
- [CVE-2015-4738](https://cve.now/CVE-2015-4738.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM Candidate Gateway component in Oracle PeopleSoft Products 9.1 and 9.2 allows remo (no CVSS)
- [CVE-2015-4739](https://cve.now/CVE-2015-4739.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticate (no CVSS)
- [CVE-2015-4740](https://cve.now/CVE-2015-4740.md): Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 (no CVSS)
- [CVE-2015-4741](https://cve.now/CVE-2015-4741.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users (no CVSS)
- [CVE-2015-4742](https://cve.now/CVE-2015-4742.md): Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 (no CVSS)
- [CVE-2015-4743](https://cve.now/CVE-2015-4743.md): Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to af (no CVSS)
- [CVE-2015-4744](https://cve.now/CVE-2015-4744.md): Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLo (no CVSS)
- [CVE-2015-4745](https://cve.now/CVE-2015-4745.md): Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and (no CVSS)
- [CVE-2015-4746](https://cve.now/CVE-2015-4746.md): Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0 (no CVSS)
- [CVE-2015-4747](https://cve.now/CVE-2015-4747.md): Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers (no CVSS)
- [CVE-2015-4748](https://cve.now/CVE-2015-4748.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote (no CVSS)
- [CVE-2015-4749](https://cve.now/CVE-2015-4749.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attacker (no CVSS)
- [CVE-2015-4750](https://cve.now/CVE-2015-4750.md): Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems Products Suite 3.2 allows remote attackers to af (no CVSS)
- [CVE-2015-4751](https://cve.now/CVE-2015-4751.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers t (no CVSS)
- [CVE-2015-4752](https://cve.now/CVE-2015-4752.md): Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2015-4753](https://cve.now/CVE-2015-4753.md): Unspecified vulnerability in the RDBMS Support Tools component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows l (no CVSS)
- [CVE-2015-4754](https://cve.now/CVE-2015-4754.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4755](https://cve.now/CVE-2015-4755.md): Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2015-4756](https://cve.now/CVE-2015-4756.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-4757](https://cve.now/CVE-2015-4757.md): Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2015-4758](https://cve.now/CVE-2015-4758.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-4759](https://cve.now/CVE-2015-4759.md): Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect c (no CVSS)
- [CVE-2015-4760](https://cve.now/CVE-2015-4760.md): Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2015-4761](https://cve.now/CVE-2015-4761.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-4763](https://cve.now/CVE-2015-4763.md): Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to (no CVSS)
- [CVE-2015-4764](https://cve.now/CVE-2015-4764.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4765](https://cve.now/CVE-2015-4765.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote a (no CVSS)
- [CVE-2015-4767](https://cve.now/CVE-2015-4767.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-4768](https://cve.now/CVE-2015-4768.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-4769](https://cve.now/CVE-2015-4769.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-4770](https://cve.now/CVE-2015-4770.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to UNIX filesystem (no CVSS)
- [CVE-2015-4771](https://cve.now/CVE-2015-4771.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2015-4772](https://cve.now/CVE-2015-4772.md): Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-4773](https://cve.now/CVE-2015-4773.md): Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authen (no CVSS)
- [CVE-2015-4774](https://cve.now/CVE-2015-4774.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4775](https://cve.now/CVE-2015-4775.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4776](https://cve.now/CVE-2015-4776.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4777](https://cve.now/CVE-2015-4777.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4778](https://cve.now/CVE-2015-4778.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4779](https://cve.now/CVE-2015-4779.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4780](https://cve.now/CVE-2015-4780.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4781](https://cve.now/CVE-2015-4781.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4782](https://cve.now/CVE-2015-4782.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4783](https://cve.now/CVE-2015-4783.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4784](https://cve.now/CVE-2015-4784.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4785](https://cve.now/CVE-2015-4785.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4786](https://cve.now/CVE-2015-4786.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4787](https://cve.now/CVE-2015-4787.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4788](https://cve.now/CVE-2015-4788.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4789](https://cve.now/CVE-2015-4789.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)
- [CVE-2015-4790](https://cve.now/CVE-2015-4790.md): Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows lo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.