Shortened for this page: results: 3 of 25 shown; results[].references: first 10 items; results[].enrichment.cpe: first 10 items
{
"page": 1,
"page_size": 25,
"result_count": 72409,
"results": [
{
"id": "CVE-2016-0494",
"source_identifier": "user@oracle.com",
"published": "2016-01-21T03:00:42Z",
"last_modified": "2026-06-17T00:37:38Z",
"status": "Modified",
"evaluator_comment": "Per Oracle: Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.",
"evaluator_solution": null,
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en los componentes Java SE y Java SE Embedded en Oracle Java SE 6u105, 7u91 y 8u66 y Java SE Embedded 8u65 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con 2D."
}
],
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0049.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0050.html",
"source": "user@oracle.com",
"tags": null
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": false,
"obtain_all_privilege": false,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"match_criteria_id": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"match_criteria_id": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"match_criteria_id": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"match_criteria_id": "E88A537F-F4D0-46B9-9E37-965233C2A355",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update105:*:*:*:*:*:*",
"match_criteria_id": "B0AD78A5-E3C8-4CF1-967C-7F934F9DAFE3",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update91:*:*:*:*:*:*",
"match_criteria_id": "4B0EF44A-833C-4B9D-824A-5E0FFFBA8340",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*",
"match_criteria_id": "D6C77242-C6FB-4BED-BA51-E9477D64E311",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update105:*:*:*:*:*:*",
"match_criteria_id": "7CB263D7-6718-4BE2-8423-B25FD727915E",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update91:*:*:*:*:*:*",
"match_criteria_id": "CB1CAC76-2414-43D0-917D-5C1E60438178",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update66:*:*:*:*:*:*",
"match_criteria_id": "1475C6EC-E2F6-4881-A89E-FB75C1AD1F20",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "12.04",
"affected_versions_last": "12.04"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "14.04",
"affected_versions_last": "14.04"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "15.04",
"affected_versions_last": "15.04"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "15.10",
"affected_versions_last": "15.10"
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update105:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.6.0",
"affected_versions_last": "1.6.0"
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update91:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.7.0",
"affected_versions_last": "1.7.0"
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.8.0",
"affected_versions_last": "1.8.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update105:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.6.0",
"affected_versions_last": "1.6.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update91:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.7.0",
"affected_versions_last": "1.7.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update66:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.8.0",
"affected_versions_last": "1.8.0"
}
],
"cwe": null,
"epss_score": {
"epss": 0.07211,
"percentile": 0.94041,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
},
{
"id": "CVE-2016-0483",
"source_identifier": "user@oracle.com",
"published": "2016-01-21T03:00:31Z",
"last_modified": "2026-06-17T00:37:37Z",
"status": "Modified",
"evaluator_comment": "Per Oracle: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",
"evaluator_solution": null,
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Oracle Java SE 6u105, 7u91 y 8u66; Java SE Embedded 8u65; y JRockit R28.3.8 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con AWT. NOTA: la información anterior es de la CPU de Enero de 2016. Oracle no ha comentado sobre las reclamaciones de terceros que esto es desbordamiento de buffer basado en memoria dinámica en la función readImage, lo que permite a atacantes remotos ejecutar código arbitrario a través de datos de imagen manipulada."
}
],
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0049.html",
"source": "user@oracle.com",
"tags": null
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-0050.html",
"source": "user@oracle.com",
"tags": null
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": false,
"obtain_all_privilege": false,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update105:*:*:*:*:*:*",
"match_criteria_id": "B0AD78A5-E3C8-4CF1-967C-7F934F9DAFE3",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update91:*:*:*:*:*:*",
"match_criteria_id": "4B0EF44A-833C-4B9D-824A-5E0FFFBA8340",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*",
"match_criteria_id": "D6C77242-C6FB-4BED-BA51-E9477D64E311",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update105:*:*:*:*:*:*",
"match_criteria_id": "7CB263D7-6718-4BE2-8423-B25FD727915E",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update91:*:*:*:*:*:*",
"match_criteria_id": "CB1CAC76-2414-43D0-917D-5C1E60438178",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update66:*:*:*:*:*:*",
"match_criteria_id": "1475C6EC-E2F6-4881-A89E-FB75C1AD1F20",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:jrockit:r28.3.8:*:*:*:*:*:*:*",
"match_criteria_id": "79B1FE51-77FB-465F-BCF0-7076CBF54BF6",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
},
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"match_criteria_id": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"match_criteria_id": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"match_criteria_id": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"match_criteria_id": "E88A537F-F4D0-46B9-9E37-965233C2A355",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update105:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.6.0",
"affected_versions_last": "1.6.0"
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update91:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.7.0",
"affected_versions_last": "1.7.0"
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jdk",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.8.0",
"affected_versions_last": "1.8.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update105:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.6.0",
"affected_versions_last": "1.6.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update91:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.7.0",
"affected_versions_last": "1.7.0"
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update66:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jre",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "1.8.0",
"affected_versions_last": "1.8.0"
},
{
"criteria": "cpe:2.3:a:oracle:jrockit:r28.3.8:*:*:*:*:*:*:*",
"vendor": "oracle",
"product": "jrockit",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "r28.3.8",
"affected_versions_last": "r28.3.8"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "12.04",
"affected_versions_last": "12.04"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "14.04",
"affected_versions_last": "14.04"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"vendor": "canonical",
"product": "ubuntu_linux",
"product_type": "o",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "15.04",
"affected_versions_last": "15.04"
}
],
"cwe": null,
"epss_score": {
"epss": 0.14714,
"percentile": 0.9652,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
},
{
"id": "CVE-2016-0452",
"source_identifier": "user@oracle.com",
"published": "2016-01-21T03:00:01Z",
"last_modified": "2026-06-17T00:37:33Z",
"status": "Modified",
"evaluator_comment": "Per Oracle: The CVSS score is 10.0 only on Windows for Database versions prior to 12c. The CVSS is 7.5 (Confidentiality, Integrity and Availability is \"Partial+\") for Database 12c on Windows and for all versions of Database on Linux, Unix and other platforms.",
"evaluator_solution": null,
"evaluator_impact": null,
"cisa_exploit_add": null,
"cisa_action_due": null,
"cisa_required_action": null,
"cisa_vulnerability_name": null,
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el componente Oracle GoldenGate en Oracle GoldenGate 11.2 y 12.1.2 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2016-0451."
}
],
"references": [
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"source": "user@oracle.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/81122",
"source": "user@oracle.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-16-023",
"source": "user@oracle.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/81122",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-16-023",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
],
"metrics": {
"cvss_metric_v40": null,
"cvss_metric_v31": null,
"cvss_metric_v30": null,
"cvss_metric_v2": [
{
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"access_vector": "NETWORK",
"access_complexity": "LOW",
"authentication": "NONE",
"confidentiality_impact": "COMPLETE",
"integrity_impact": "COMPLETE",
"availability_impact": "COMPLETE",
"base_score": 10.0,
"exploitability": null,
"remediation_level": null,
"report_confidence": null,
"temporal_score": null,
"collateral_damage_potential": null,
"target_distribution": null,
"confidentiality_requirement": null,
"integrity_requirement": null,
"availability_requirement": null,
"environmental_score": null
},
"base_severity": "HIGH",
"exploitability_score": 10.0,
"impact_score": 10.0,
"ac_insuf_info": false,
"obtain_all_privilege": false,
"obtain_user_privilege": false,
"obtain_other_privilege": false,
"user_interaction_required": false
}
]
},
"weaknesses": [
{
"source": "user@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": null,
"negate": null,
"nodes": [
{
"operator": "OR",
"negate": false,
"cpe_match": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:goldengate:11.2:*:*:*:*:*:*:*",
"match_criteria_id": "A5DF494F-F9BE-4645-BF0C-F354563D13FF",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:goldengate:12.1.2:*:*:*:*:*:*:*",
"match_criteria_id": "B68304BF-C606-49CF-A410-5F4C5BC7EFAD",
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null
}
]
}
]
}
],
"vendor_comments": null,
"enrichment": {
"cpe": [
{
"criteria": "cpe:2.3:a:oracle:goldengate:11.2:*:*:*:*:*:*:*",
"vendor": "oracle",
"product": "goldengate",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "11.2",
"affected_versions_last": "11.2"
},
{
"criteria": "cpe:2.3:a:oracle:goldengate:12.1.2:*:*:*:*:*:*:*",
"vendor": "oracle",
"product": "goldengate",
"product_type": "a",
"vulnerable": true,
"version_start_including": null,
"version_start_excluding": null,
"version_end_including": null,
"version_end_excluding": null,
"affected_versions_first": "12.1.2",
"affected_versions_last": "12.1.2"
}
],
"cwe": null,
"epss_score": {
"epss": 0.05941,
"percentile": 0.92946,
"date": "2026-09-23"
},
"cisa_kev": null,
"vdeep_metric": {
"available_versions": [
"2.0"
],
"source": "user@nist.gov",
"type": "Primary",
"cvss_data": {
"version": "2.0",
"vector_string": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"attack_vector": "NETWORK",
"attack_complexity": "LOW",
"attack_requirements": null,
"privileges_required": null,
"user_interaction": null,
"vulnerable_system_confidentiality": "COMPLETE",
"vulnerable_system_integrity": "COMPLETE",
"vulnerable_system_availability": "COMPLETE",
"subsequent_system_confidentiality": null,
"subsequent_system_integrity": null,
"subsequent_system_availability": null,
"exploit_maturity": null,
"confidentiality_requirements": null,
"integrity_requirements": null,
"availability_requirements": null,
"modified_attack_vector": null,
"modified_attack_complexity": null,
"modified_attack_requirements": null,
"modified_privileges_required": null,
"modified_user_interaction": null,
"modified_vulnerable_system_confidentiality": null,
"modified_vulnerable_system_integrity": null,
"modified_vulnerable_system_availability": null,
"modified_subsequent_system_confidentiality": null,
"modified_subsequent_system_integrity": null,
"modified_subsequent_system_availability": null,
"safety": null,
"automatable": null,
"recovery": null,
"value_density": null,
"vulnerability_response_effort": null,
"provider_urgency": null,
"base_score": 10.0,
"base_severity": "HIGH"
}
}
}
}
]
}