Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

109 vulnerabilities found for Database Server by Oracle

CERTFR-2018-AVI-187

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle GoldenGate version 12.2.0.1
Oracle Database Server Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 et 18.1.0.0
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle GoldenGate version 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 et 18.1.0.0",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-2832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2832"
    },
    {
      "name": "CVE-2018-2841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2841"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-187",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-04-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database\nServer. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2018verbose-3678067 du 17 avril 2018",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018verbose-3678108.html#DB"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2018-3678067 du 17 avril 2018",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
    }
  ]
}

CERTFR-2018-AVI-035

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server versions 11.2.0.4, 12.1.0.2 et 12.2.0.1
Oracle Database Server Oracle Database Server versions antérieures à 5.1.4.00.08
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server versions 11.2.0.4, 12.1.0.2 et 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions ant\u00e9rieures \u00e0 5.1.4.00.08",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-2699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2699"
    },
    {
      "name": "CVE-2018-2680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2680"
    },
    {
      "name": "CVE-2018-2575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-2575"
    },
    {
      "name": "CVE-2017-10282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10282"
    },
    {
      "name": "CVE-2017-12617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-12617"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-035",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-01-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database\nServer. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujan2018verbose-3236630#DB du 16 janvier 2018",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018verbose-3236630.html#DB"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujan2018-3236628 du 16 janvier 2018",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
    }
  ]
}

CERTFR-2017-AVI-370

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer un déni de service, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Java VM versions 11.2.0.4, 12.1.0.2 et 12.2.0.1
Oracle Database Server RDBMS Security versions 11.2.0.4, 12.1.0.2 et 12.2.0.1
Oracle Database Server WLM (Apache Tomcat) version 12.2.0.1
Oracle Database Server Spatial (Apache Groovy) version 12.2.0.1
Oracle Database Server XML Database versions 11.2.0.4 et 12.1.0.2
Oracle Database Server Core RDBMS versions 11.2.0.4, 12.1.0.2 et 12.2.0.1
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Java VM versions 11.2.0.4, 12.1.0.2 et 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "RDBMS Security versions 11.2.0.4, 12.1.0.2 et 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "WLM (Apache Tomcat) version 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Spatial (Apache Groovy) version 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "XML Database versions 11.2.0.4 et 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Core RDBMS versions 11.2.0.4, 12.1.0.2 et 12.2.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-8735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-8735"
    },
    {
      "name": "CVE-2017-10261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10261"
    },
    {
      "name": "CVE-2017-10321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10321"
    },
    {
      "name": "CVE-2016-6814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-6814"
    },
    {
      "name": "CVE-2017-10190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10190"
    },
    {
      "name": "CVE-2017-10292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-10292"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-370",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2017-10-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Database\nServer. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service,\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2017-3236626 du 18 octobre 2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixDB"
    }
  ]
}

CERTFR-2017-AVI-118

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Secure Backup versions antérieures à 12.1.0.3.0
Oracle Database Server Oracle Database Server versions 12.1.0.2
Oracle Database Server Oracle Database Server versions 11.2.0.4
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Secure Backup versions ant\u00e9rieures \u00e0 12.1.0.3.0",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-3486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3486"
    },
    {
      "name": "CVE-2016-6290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-6290"
    },
    {
      "name": "CVE-2017-3567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3567"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril    2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18    avril 2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017verbose-3236619.html#DB"
    }
  ],
  "reference": "CERTFR-2017-AVI-118",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-04-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18 avril 2017",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril 2017",
      "url": null
    }
  ]
}

CERTFR-2016-AVI-348

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server versions antérieures à 5.0.4.00.07
Oracle Database Server Oracle Database Server version 11.2.0.4
Oracle Database Server Oracle Secure Backup versions antérieures à 12.1.0.2.0
Oracle Database Server Oracle Database Server version 12.1.0.2
Oracle Database Server Oracle Secure Backup versions antérieures à 10.4.0.4.0
Oracle Database Server Oracle Big Data Graph versions antérieures à Prior to 1.2
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server versions ant\u00e9rieures \u00e0 5.0.4.00.07",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Secure Backup versions ant\u00e9rieures \u00e0 12.1.0.2.0",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Secure Backup versions ant\u00e9rieures \u00e0 10.4.0.4.0",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Big Data Graph versions ant\u00e9rieures \u00e0 Prior to 1.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-5516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5516"
    },
    {
      "name": "CVE-2016-5497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5497"
    },
    {
      "name": "CVE-2015-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0286"
    },
    {
      "name": "CVE-2016-3562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3562"
    },
    {
      "name": "CVE-2015-7501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7501"
    },
    {
      "name": "CVE-2016-5555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5555"
    },
    {
      "name": "CVE-2016-5505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5505"
    },
    {
      "name": "CVE-2016-5498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5498"
    },
    {
      "name": "CVE-2015-1351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1351"
    },
    {
      "name": "CVE-2016-5499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5499"
    },
    {
      "name": "CVE-2016-5572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5572"
    },
    {
      "name": "CVE-2010-5312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-5312"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016verbose-2881725 du 18    octobre 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html#OSB"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016verbose-2881722 du 18    octobre 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html#DB"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016-2881722 du 18    octobre 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
    }
  ],
  "reference": "CERTFR-2016-AVI-348",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-10-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016verbose-2881725 du 18 octobre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016-2881722 du 18 octobre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2016verbose-2881722 du 18 octobre 2016",
      "url": null
    }
  ]
}

CERTFR-2016-AVI-242

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server version 11.2.0.4
Oracle Database Server Oracle Database Server version 12.1.0.2
Oracle Database Server Oracle Database Server version 12.1.0.1
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-3609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3609"
    },
    {
      "name": "CVE-2016-3479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3479"
    },
    {
      "name": "CVE-2016-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3489"
    },
    {
      "name": "CVE-2016-3467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3467"
    },
    {
      "name": "CVE-2016-3448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3448"
    },
    {
      "name": "CVE-2016-3488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3488"
    },
    {
      "name": "CVE-2016-3484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3484"
    },
    {
      "name": "CVE-2015-0204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0204"
    },
    {
      "name": "CVE-2016-3506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3506"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2016-2881720 du 19    juillet 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2016verbose-2881721 du 19    juillet 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016verbose-2881721.html#DB"
    }
  ],
  "reference": "CERTFR-2016-AVI-242",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-07-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2016-2881720 du 19 juillet 2016",
      "url": null
    }
  ]
}

CERTFR-2016-AVI-134

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server version 11.2.0.4
Oracle Database Server Oracle Database Server version 12.1.0.2
Oracle Database Server Oracle Database Server version 12.1.0.1
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-0681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0681"
    },
    {
      "name": "CVE-2016-3454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3454"
    },
    {
      "name": "CVE-2016-0691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0691"
    },
    {
      "name": "CVE-2016-0677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0677"
    },
    {
      "name": "CVE-2016-0690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0690"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2016v3verbose du 19 avril    2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016verbose-2881709.html#DB"
    }
  ],
  "reference": "CERTFR-2016-AVI-134",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-04-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2016v3 du 19 avril 2016",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixDB"
    }
  ]
}

CERTFR-2016-AVI-026

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance,une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server versions 11.2.0.4 et antérieures
Oracle Database Server Oracle Golden Gate versions 11.2 et antérieures
Oracle Database Server Oracle Database Server versions 12.1.0.2 et antérieures
Oracle Database Server Oracle Golden Gate versions 12.1.2 et antérieures
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server versions 11.2.0.4 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Golden Gate versions 11.2 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 12.1.0.2 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Golden Gate versions 12.1.2 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-0450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0450"
    },
    {
      "name": "CVE-2015-4921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4921"
    },
    {
      "name": "CVE-2016-0472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0472"
    },
    {
      "name": "CVE-2016-0452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0452"
    },
    {
      "name": "CVE-2016-0451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0451"
    },
    {
      "name": "CVE-2016-0467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0467"
    },
    {
      "name": "CVE-2015-4923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4923"
    },
    {
      "name": "CVE-2015-4925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4925"
    },
    {
      "name": "CVE-2016-0461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0461"
    },
    {
      "name": "CVE-2016-0499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0499"
    }
  ],
  "links": [],
  "reference": "CERTFR-2016-AVI-026",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-01-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance,une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es\net une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 19 janvier 2016",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
    }
  ]
}

CERTFR-2015-AVI-437

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Elles permettent à un attaquant de provoquer des problèmes de sécurité non spécifiés par l'éditeur.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server, version 12.1.0.2
Oracle Database Server Oracle Database Server, version 11.2.0.4
Oracle Database Server Oracle Database Server, version 12.1.0.1
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server, version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server, version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server, version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-4888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4888"
    },
    {
      "name": "CVE-2015-4857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4857"
    },
    {
      "name": "CVE-2015-4873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4873"
    },
    {
      "name": "CVE-2015-4863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4863"
    },
    {
      "name": "CVE-2015-4796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4796"
    },
    {
      "name": "CVE-2015-4794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4794"
    },
    {
      "name": "CVE-2015-4900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4900"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-437",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-10-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer des probl\u00e8mes de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9s par\nl\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 20 octobre 2015",
      "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
    }
  ]
}

CERTFR-2015-AVI-303

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server versions 11.2.0.4 et antérieures
Oracle Database Server Oracle Database Server versions 11.1.0.7 et antérieures
Oracle Database Server Oracle Database Server versions 12.1.0.2 et antérieures
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server versions 11.2.0.4 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 11.1.0.7 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 12.1.0.2 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-2586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2586"
    },
    {
      "name": "CVE-2015-0468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0468"
    },
    {
      "name": "CVE-2015-4740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4740"
    },
    {
      "name": "CVE-2015-4755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4755"
    },
    {
      "name": "CVE-2015-2585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2585"
    },
    {
      "name": "CVE-2015-2599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2599"
    },
    {
      "name": "CVE-2015-2595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2595"
    },
    {
      "name": "CVE-2015-2629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2629"
    },
    {
      "name": "CVE-2015-2655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2655"
    },
    {
      "name": "CVE-2015-4753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4753"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-303",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": ""
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans Oracle Database\nServer. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 14 juillet 2015",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
    }
  ]
}

CERTFR-2015-AVI-170

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle Database Server versions 11.2.0.4 et antérieures
Oracle Database Server Oracle Database Server versions 11.1.0.7 et antérieures
Oracle Database Server Oracle Database Server versions 12.1.0.2 et antérieures
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Database Server versions 11.2.0.4 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 11.1.0.7 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Server versions 12.1.0.2 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-0479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0479"
    },
    {
      "name": "CVE-2015-0457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0457"
    },
    {
      "name": "CVE-2015-0483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0483"
    },
    {
      "name": "CVE-2015-0455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0455"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-170",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-04-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par\nl\u0027\u00e9diteur.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 14 avril 2015",
      "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
    }
  ]
}

CERTFR-2015-AVI-033

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance, un contournement de la politique de sécurité, une atteinte à l'intégrité des données, une atteinte à la confidentialité des données, ou une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server XML Developers Kit Version 11.2.0.3
Oracle Database Server OLAP Version 11.1.0.7
Oracle Database Server XML Developers Kit Version 12.1.0.2
Oracle Database Server PL/SQL Version 12.1.0.1
Oracle Database Server Oracle Database Version 12.1.0.2
Oracle Database Server PL/SQL Version 11.1.0.7
Oracle Database Server Workspace Manager Version 11.2.0.3
Oracle Database Server Oracle Database Version 11.1.0.7
Oracle Database Server PL/SQL Version 11.2.0.3
Oracle Database Server OLAP Version 12.1.0.1
Oracle Database Server PL/SQL Version 11.2.0.4
Oracle Database Server OLAP Version 12.1.0.2
Oracle Database Server Workspace Manager Version 12.1.0.1
Oracle Database Server Workspace Manager Version 11.2.0.4
Oracle Database Server Workspace Manager Version 11.1.0.7
Oracle Database Server Oracle Database Version 11.2.0.4
Oracle Database Server OLAP Version 11.2.0.3
Oracle Database Server Oracle Database Version 12.1.0.1
Oracle Database Server OLAP Version 11.2.0.4
Oracle Database Server XML Developers Kit Version 12.1.0.1
Oracle Database Server Oracle Database Version 11.2.0.3
Oracle Database Server XML Developers Kit Version 11.2.0.4
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XML Developers Kit Version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "OLAP Version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "XML Developers Kit Version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "PL/SQL Version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "PL/SQL Version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace Manager Version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "PL/SQL Version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "OLAP Version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "PL/SQL Version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "OLAP Version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace Manager Version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace Manager Version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace Manager Version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "OLAP Version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "OLAP Version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "XML Developers Kit Version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database Version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "XML Developers Kit Version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-6577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6577"
    },
    {
      "name": "CVE-2015-0370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0370"
    },
    {
      "name": "CVE-2015-0371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0371"
    },
    {
      "name": "CVE-2014-6567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6567"
    },
    {
      "name": "CVE-2015-0373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0373"
    },
    {
      "name": "CVE-2014-6514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6514"
    },
    {
      "name": "CVE-2014-6541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6541"
    },
    {
      "name": "CVE-2014-6578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6578"
    }
  ],
  "links": [],
  "reference": "CERTFR-2015-AVI-033",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-01-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, ou une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle CPUJan2015 du 20 janvier 2015",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
    }
  ]
}

CERTFR-2014-AVI-428

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server SQLJ version 11.1.0.7
Oracle Database Server SQLJ version 12.1.0.2
Oracle Database Server Advanced Networking Option version 11.2.0.4
Oracle Database Server Oracle Database version 11.2.0.3
Oracle Database Server SQLJ version 11.2.0.4
Oracle Database Server JDBC version 11.1.0.7
Oracle Database Server Advanced Networking Option version 12.1.0.1
Oracle Database Server Advanced Networking Option version 11.2.0.3
Oracle Database Server JDBC version 12.1.0.1
Oracle Database Server Oracle Database version 11.2.0.4
Oracle Database Server JDBC version 11.2.0.3
Oracle Database Server JDBC version 12.1.0.2
Oracle Database Server Application Express toute version antérieure à 4.2.6
Oracle Database Server SQLJ version 11.2.0.3
Oracle Database Server Oracle Database version 12.1.0.2
Oracle Database Server Oracle Database version 11.1.0.7
Oracle Database Server SQLJ version 12.1.0.1
Oracle Database Server Oracle Database version 12.1.0.1
Oracle Database Server JDBC version 11.2.0.4
Oracle Database Server Advanced Networking Option version 11.1.0.7
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SQLJ version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "SQLJ version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Advanced Networking Option version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "SQLJ version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JDBC version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Advanced Networking Option version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Advanced Networking Option version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JDBC version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JDBC version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JDBC version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Application Express toute version ant\u00e9rieure \u00e0 4.2.6",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "SQLJ version 11.2.0.3",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database version 12.1.0.2",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "SQLJ version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JDBC version 11.2.0.4",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Advanced Networking Option version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6547"
    },
    {
      "name": "CVE-2014-4293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4293"
    },
    {
      "name": "CVE-2014-6452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6452"
    },
    {
      "name": "CVE-2014-4292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4292"
    },
    {
      "name": "CVE-2014-4296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4296"
    },
    {
      "name": "CVE-2014-6538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6538"
    },
    {
      "name": "CVE-2014-4290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4290"
    },
    {
      "name": "CVE-2014-4298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4298"
    },
    {
      "name": "CVE-2014-4291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4291"
    },
    {
      "name": "CVE-2014-4299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4299"
    },
    {
      "name": "CVE-2014-6467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6467"
    },
    {
      "name": "CVE-2014-6454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6454"
    },
    {
      "name": "CVE-2014-6455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6455"
    },
    {
      "name": "CVE-2014-6545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6545"
    },
    {
      "name": "CVE-2014-6544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6544"
    },
    {
      "name": "CVE-2014-6537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6537"
    },
    {
      "name": "CVE-2014-4289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4289"
    },
    {
      "name": "CVE-2014-4300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4300"
    },
    {
      "name": "CVE-2014-6483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6483"
    },
    {
      "name": "CVE-2014-6560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6560"
    },
    {
      "name": "CVE-2014-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6546"
    },
    {
      "name": "CVE-2014-6453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6453"
    },
    {
      "name": "CVE-2014-4294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4294"
    },
    {
      "name": "CVE-2014-4295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4295"
    },
    {
      "name": "CVE-2014-4297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4297"
    },
    {
      "name": "CVE-2014-2478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-2478"
    },
    {
      "name": "CVE-2014-4301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4301"
    },
    {
      "name": "CVE-2014-6542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6542"
    },
    {
      "name": "CVE-2014-4310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4310"
    },
    {
      "name": "CVE-2014-6563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6563"
    }
  ],
  "links": [],
  "reference": "CERTFR-2014-AVI-428",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle CPUOct2014 du 14 octobre 2014",
      "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html"
    }
  ]
}

CERTA-2014-AVI-021

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle Database Server Oracle database Server version 12.1.0.1
Oracle Database Server Oracle database Server versions 11.2.0.4 et antérieures
Oracle Database Server Oracle database Server version 11.1.0.7
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle database Server version 12.1.0.1",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle database Server versions 11.2.0.4 et ant\u00e9rieures",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle database Server version 11.1.0.7",
      "product": {
        "name": "Database Server",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-5764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5764"
    },
    {
      "name": "CVE-2014-0378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0378"
    },
    {
      "name": "CVE-2013-5853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5853"
    },
    {
      "name": "CVE-2014-0377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0377"
    },
    {
      "name": "CVE-2013-5858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5858"
    }
  ],
  "links": [],
  "reference": "CERTA-2014-AVI-021",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-01-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Database Server\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Database Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujan2014 du 14 janvier 2014",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
    }
  ]
}