Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0361.

IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.


Provide references for further information: Can you share references or external links related to CVE-2016-0361?

{'name': '1036455', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036455'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21986595'}, {'name': '90550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90550'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0361?


Explain the CVE ID: What does the identifier CVE-2016-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0362.

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service.


Provide references for further information: Can you share references or external links related to CVE-2016-0362?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21980749'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0362?


Explain the CVE ID: What does the identifier CVE-2016-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0363.

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.


Provide references for further information: Can you share references or external links related to CVE-2016-0363?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21980826'}, {'name': '85895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85895'}, {'name': 'SUSE-SU-2016:1299', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html'}, {'name': 'RHSA-2016:1039', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1039.html'}, {'name': 'RHSA-2016:0701', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0701.html'}, {'name': 'SUSE-SU-2016:1303', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html'}, {'name': 'SUSE-SU-2016:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html'}, {'name': 'SUSE-SU-2016:1300', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html'}, {'name': 'RHSA-2016:1430', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1430'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-explorations.com/materials/SE-2012-01-IBM-4.pdf'}, {'name': 'RHSA-2016:0708', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0708.html'}, {'name': 'SUSE-SU-2016:1378', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html'}, {'name': 'SUSE-SU-2016:1379', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html'}, {'name': '20160405 Re: [SE-2012-01] Broken security fix in IBM Java 7/8', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/20'}, {'name': 'SUSE-SU-2016:1458', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html'}, {'name': 'RHSA-2016:0716', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0716.html'}, {'name': '1035953', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035953'}, {'name': '20160404 [SE-2012-01] Broken security fix in IBM Java 7/8', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/3'}, {'name': 'SUSE-SU-2016:1388', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html'}, {'name': 'RHSA-2016:0702', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0702.html'}, {'name': 'RHSA-2017:1216', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1216'}, {'name': 'IX90172', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IX90172'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0363?


Explain the CVE ID: What does the identifier CVE-2016-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0364.

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters.


Provide references for further information: Can you share references or external links related to CVE-2016-0364?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg2C1000152'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0364?


Explain the CVE ID: What does the identifier CVE-2016-0365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0365.

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0365?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg2C1000149'}, {'name': '91526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91526'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0365?


Explain the CVE ID: What does the identifier CVE-2016-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0366.

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attackers to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 112071.


Provide references for further information: Can you share references or external links related to CVE-2016-0366?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21986260'}, {'name': 'ibm-sim-cve20160366-weak-security(112071)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/112071'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0366?


Explain the CVE ID: What does the identifier CVE-2016-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0367.

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072.


Provide references for further information: Can you share references or external links related to CVE-2016-0367?

{'name': 'ibm-sim-cve20160367-info-disc(112072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/112072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21989198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0367?


Explain the CVE ID: What does the identifier CVE-2016-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0369.

XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.


Provide references for further information: Can you share references or external links related to CVE-2016-0369?

{'name': 'ibm-forms-cve20160369-info-disc(112088)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/112088'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21988727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0369?


Explain the CVE ID: What does the identifier CVE-2016-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0370.

Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product.


Provide references for further information: Can you share references or external links related to CVE-2016-0370?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21988726'}, {'name': 'LO88449', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1LO88449'}, {'name': '92471', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92471'}, {'name': 'LO88451', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1LO88451'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0370?


Explain the CVE ID: What does the identifier CVE-2016-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0371.

The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.


Provide references for further information: Can you share references or external links related to CVE-2016-0371?

{'name': '94148', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/94148'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21985114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0371?


Explain the CVE ID: What does the identifier CVE-2016-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0372.

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.


Provide references for further information: Can you share references or external links related to CVE-2016-0372?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21991478'}, {'name': '94541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/94541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0372?


Explain the CVE ID: What does the identifier CVE-2016-0373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0373.

IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.


Provide references for further information: Can you share references or external links related to CVE-2016-0373?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219'}, {'name': 'ibm-ucd-cve20160373-info-disc(112119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/112119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0373?


Explain the CVE ID: What does the identifier CVE-2016-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0374.

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0374?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21981729'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0374?


Explain the CVE ID: What does the identifier CVE-2016-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0375.

JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrator privileges for executing arbitrary commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0375?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21985064'}, {'name': 'IT15743', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IT15743'}, {'name': 'IT15674', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IT15674'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0375?


Explain the CVE ID: What does the identifier CVE-2016-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0376.

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.


Provide references for further information: Can you share references or external links related to CVE-2016-0376?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21980826'}, {'name': 'SUSE-SU-2016:1299', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html'}, {'name': 'RHSA-2016:1039', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1039.html'}, {'name': 'RHSA-2016:0701', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0701.html'}, {'name': '89192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/89192'}, {'name': 'SUSE-SU-2016:1303', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html'}, {'name': 'SUSE-SU-2016:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html'}, {'name': 'SUSE-SU-2016:1300', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html'}, {'name': 'RHSA-2016:1430', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1430'}, {'name': 'RHSA-2016:0708', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0708.html'}, {'name': 'SUSE-SU-2016:1378', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html'}, {'name': 'SUSE-SU-2016:1379', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html'}, {'name': 'SUSE-SU-2016:1458', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html'}, {'name': '20160412 [SE-2012-01] Yet another broken security fix in IBM Java 7/8', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/43'}, {'name': 'RHSA-2016:0716', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0716.html'}, {'name': '1035953', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035953'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-explorations.com/materials/SE-2012-01-IBM-5.pdf'}, {'name': 'IX90171', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IX90171'}, {'name': 'SUSE-SU-2016:1388', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html'}, {'name': 'RHSA-2016:0702', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0702.html'}, {'name': 'RHSA-2017:1216', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1216'}, {'name': '20160412 [SE-2012-01] Yet another broken security fix in IBM Java 7/8', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538066/100/100/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0376?


Explain the CVE ID: What does the identifier CVE-2016-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0377.

The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0377?

{'name': '1036653', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036653'}, {'name': '92514', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92514'}, {'name': 'PI56917', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21980645'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0377?


Explain the CVE ID: What does the identifier CVE-2016-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0378.

IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by triggering an exception.


Provide references for further information: Can you share references or external links related to CVE-2016-0378?

{'name': '93143', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/93143'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21981529'}, {'name': 'PI54459', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI54459'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0378?


Explain the CVE ID: What does the identifier CVE-2016-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0379.

IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by leveraging queue-manager rights.


Provide references for further information: Can you share references or external links related to CVE-2016-0379?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21984565'}, {'name': '93146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/93146'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0379?


Explain the CVE ID: What does the identifier CVE-2016-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0380.

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.


Provide references for further information: Can you share references or external links related to CVE-2016-0380?

{'name': '92336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92336'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21988278'}, {'name': 'IT14769', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0380?


Explain the CVE ID: What does the identifier CVE-2016-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0381.

IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value.


Provide references for further information: Can you share references or external links related to CVE-2016-0381?

{'name': '1035930', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035930'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21981936'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0381?


Explain the CVE ID: What does the identifier CVE-2016-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0382.

The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356.


Provide references for further information: Can you share references or external links related to CVE-2016-0382?

{'name': '98301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98301'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg22000590'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0382?


Explain the CVE ID: What does the identifier CVE-2016-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0385.

Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0385?

{'name': '92505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92505'}, {'name': '1036654', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036654'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21982588'}, {'name': 'PI60026', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI60026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0385?


Explain the CVE ID: What does the identifier CVE-2016-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0386.

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.


Provide references for further information: Can you share references or external links related to CVE-2016-0386?

{'name': 'IV83657', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IV83657'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0386?


Explain the CVE ID: What does the identifier CVE-2016-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0387.

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883.


Provide references for further information: Can you share references or external links related to CVE-2016-0387?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21981740'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0387?


Explain the CVE ID: What does the identifier CVE-2016-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0389.

Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0389?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21982012'}, {'name': 'PI62052', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052'}, {'name': '91515', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91515'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0389?


Explain the CVE ID: What does the identifier CVE-2016-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0390.

Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0390?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21981321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0390?


Explain the CVE ID: What does the identifier CVE-2016-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0391.

The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.


Provide references for further information: Can you share references or external links related to CVE-2016-0391?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21982615'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0391?


Explain the CVE ID: What does the identifier CVE-2016-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0392.

IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.


Provide references for further information: Can you share references or external links related to CVE-2016-0392?

{'name': '91082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91082'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html'}, {'name': 'IV84206', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IV84206'}, {'name': '1036458', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036458'}, {'name': '20160607 [CVE-2016-0392] IBM GPFS / Spectrum Scale Command Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538620/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005875'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0392?


Explain the CVE ID: What does the identifier CVE-2016-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0393.

IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files.


Provide references for further information: Can you share references or external links related to CVE-2016-0393?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21986053'}, {'name': '91744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91744'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0393?


Explain the CVE ID: What does the identifier CVE-2016-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0394.

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files.


Provide references for further information: Can you share references or external links related to CVE-2016-0394?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21985013'}, {'name': '94577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/94577'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0394?


Explain the CVE ID: What does the identifier CVE-2016-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0396.

IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected.


Provide references for further information: Can you share references or external links related to CVE-2016-0396?

{'name': '94155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/94155'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21993206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0396?


Explain the CVE ID: What does the identifier CVE-2016-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0397.

WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.


Provide references for further information: Can you share references or external links related to CVE-2016-0397?

{'name': '92467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92467'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21985907'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0397?


Explain the CVE ID: What does the identifier CVE-2016-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0398.

IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0398?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21977070'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0398?


Explain the CVE ID: What does the identifier CVE-2016-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0399.

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0399?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21984134'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0399?


Explain the CVE ID: What does the identifier CVE-2016-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0400.

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0400?

{'name': 'PI60897', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI60897'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21983036'}, {'name': '40039', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40039/'}, {'name': 'PI60898', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PI60898'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0400?


Explain the CVE ID: What does the identifier CVE-2016-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0401.

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429.


Provide references for further information: Can you share references or external links related to CVE-2016-0401?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0401?


Explain the CVE ID: What does the identifier CVE-2016-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0402.

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.


Provide references for further information: Can you share references or external links related to CVE-2016-0402?

{'name': 'openSUSE-SU-2016:0272', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html'}, {'name': '81096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81096'}, {'name': '1034715', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034715'}, {'name': 'openSUSE-SU-2016:0279', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html'}, {'name': 'GLSA-201610-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201610-08'}, {'name': 'USN-2884-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2884-1'}, {'name': 'DSA-3465', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3465'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'USN-2885-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2885-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'RHSA-2016:1430', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1430'}, {'name': 'RHSA-2016:0049', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'}, {'name': 'openSUSE-SU-2016:0270', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html'}, {'name': 'RHSA-2016:0053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0053.html'}, {'name': 'SUSE-SU-2016:0269', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html'}, {'name': 'RHSA-2016:0067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0067.html'}, {'name': 'openSUSE-SU-2016:0263', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html'}, {'name': 'SUSE-SU-2016:0256', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'}, {'name': 'GLSA-201603-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-14'}, {'name': 'RHSA-2016:0057', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0057.html'}, {'name': 'RHSA-2016:0055', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'}, {'name': 'RHSA-2016:0054', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0054.html'}, {'name': 'RHSA-2016:0056', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0056.html'}, {'name': 'openSUSE-SU-2016:0268', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html'}, {'name': 'RHSA-2016:0050', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'}, {'name': 'DSA-3458', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3458'}, {'name': 'SUSE-SU-2016:0265', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0402?


Explain the CVE ID: What does the identifier CVE-2016-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0403.

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities.


Provide references for further information: Can you share references or external links related to CVE-2016-0403?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0403?


Explain the CVE ID: What does the identifier CVE-2016-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0404.

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin.


Provide references for further information: Can you share references or external links related to CVE-2016-0404?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0404?


Explain the CVE ID: What does the identifier CVE-2016-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0405.

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4 allows local users to affect confidentiality via vectors related to Cluster Manageability and Serviceability.


Provide references for further information: Can you share references or external links related to CVE-2016-0405?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0405?


Explain the CVE ID: What does the identifier CVE-2016-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0406.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc.


Provide references for further information: Can you share references or external links related to CVE-2016-0406?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0406?


Explain the CVE ID: What does the identifier CVE-2016-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0407.

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.


Provide references for further information: Can you share references or external links related to CVE-2016-0407?

{'name': '1035610', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035610'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0407?


Explain the CVE ID: What does the identifier CVE-2016-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0408.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.


Provide references for further information: Can you share references or external links related to CVE-2016-0408?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0408?


Explain the CVE ID: What does the identifier CVE-2016-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0409.

Unspecified vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Security.


Provide references for further information: Can you share references or external links related to CVE-2016-0409?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034720', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034720'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0409?


Explain the CVE ID: What does the identifier CVE-2016-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0410.


Provide references for further information: Can you share references or external links related to CVE-2016-0410?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0410?


Explain the CVE ID: What does the identifier CVE-2016-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0411.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1 and 11.2.0.4 allows local users to affect confidentiality, integrity, and availability via vectors related to Agent Next Gen.


Provide references for further information: Can you share references or external links related to CVE-2016-0411?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034734', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0411?


Explain the CVE ID: What does the identifier CVE-2016-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0412.

Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Manage Requisition Status.


Provide references for further information: Can you share references or external links related to CVE-2016-0412?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0412?


Explain the CVE ID: What does the identifier CVE-2016-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0413.

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support.


Provide references for further information: Can you share references or external links related to CVE-2016-0413?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0413?


Explain the CVE ID: What does the identifier CVE-2016-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0414.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0418.


Provide references for further information: Can you share references or external links related to CVE-2016-0414?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0414?


Explain the CVE ID: What does the identifier CVE-2016-0415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0415.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to UI Framework.


Provide references for further information: Can you share references or external links related to CVE-2016-0415?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0415?


Explain the CVE ID: What does the identifier CVE-2016-0416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0416.

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to System Archive Utility.


Provide references for further information: Can you share references or external links related to CVE-2016-0416?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0416?


Explain the CVE ID: What does the identifier CVE-2016-0417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0417.

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.2 allows local users to affect confidentiality, integrity, and availability via vectors related to HA for MySQL.


Provide references for further information: Can you share references or external links related to CVE-2016-0417?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0417?


Explain the CVE ID: What does the identifier CVE-2016-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0418.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0414.


Provide references for further information: Can you share references or external links related to CVE-2016-0418?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0418?


Explain the CVE ID: What does the identifier CVE-2016-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0419.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0431.


Provide references for further information: Can you share references or external links related to CVE-2016-0419?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0419?


Explain the CVE ID: What does the identifier CVE-2016-0420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0420.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics.


Provide references for further information: Can you share references or external links related to CVE-2016-0420?

{'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-011: JD Edwards Server Manager Create users', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/126'}, {'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-create-user'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138509/JD-Edwards-9.1-EnterpriseOne-Server-Create-Users.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0420?


Explain the CVE ID: What does the identifier CVE-2016-0421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0421.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC.


Provide references for further information: Can you share references or external links related to CVE-2016-0421?

{'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138508/JD-Edwards-9.1-EnterpriseOne-Server-Manager-Shutdown.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.onapsis.com/research/security-advisories/jd-edwards-server-manager-shutdown'}, {'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-010: JD Edwards Server Manager Shutdown', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/125'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0421?


Explain the CVE ID: What does the identifier CVE-2016-0422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0422.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424.


Provide references for further information: Can you share references or external links related to CVE-2016-0422?

{'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-password-disclosure'}, {'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-009: JD Edwards JDENet Password Disclosure', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/124'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138507/JD-Edwards-9.1-EnterpriseOne-Server-JDENet-Password-Disclosure.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0422?


Explain the CVE ID: What does the identifier CVE-2016-0423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0423.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC.


Provide references for further information: Can you share references or external links related to CVE-2016-0423?

{'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138512/JD-Edwards-9.1-EnterpriseOne-Server-JDENET-Denial-Of-Service.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-end-file-dos'}, {'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-014: JD Edwards JDENET function DoS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0423?


Explain the CVE ID: What does the identifier CVE-2016-0424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0424.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422.


Provide references for further information: Can you share references or external links related to CVE-2016-0424?

{'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138510/JD-Edwards-9.1-EnterpriseOne-Server-Denial-Of-Service.html'}, {'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-012: JD Edwards JDENET function DoS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/127'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.onapsis.com/research/security-advisories/jd-edwards-jdenet-type-8-dos'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0424?


Explain the CVE ID: What does the identifier CVE-2016-0425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0425.

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Monitoring and Diagnostics.


Provide references for further information: Can you share references or external links related to CVE-2016-0425?

{'name': '20160825 Onapsis Security Advisory ONAPSIS-2016-00171: JD Edwards Server Manager Password Disclosure', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Aug/129'}, {'name': '1034722', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034722'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/138511/JD-Edwards-9.1-EnterpriseOne-Server-Password-Disclosure.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0425?


Explain the CVE ID: What does the identifier CVE-2016-0426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0426.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality and availability via unknown vectors related to Solaris Kernel Zones.


Provide references for further information: Can you share references or external links related to CVE-2016-0426?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0426?


Explain the CVE ID: What does the identifier CVE-2016-0427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0427.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework.


Provide references for further information: Can you share references or external links related to CVE-2016-0427?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034734', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0427?


Explain the CVE ID: What does the identifier CVE-2016-0428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0428.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Verified Boot.


Provide references for further information: Can you share references or external links related to CVE-2016-0428?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0428?


Explain the CVE ID: What does the identifier CVE-2016-0429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0429.

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0401.


Provide references for further information: Can you share references or external links related to CVE-2016-0429?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0429?


Explain the CVE ID: What does the identifier CVE-2016-0430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0430.

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0439.


Provide references for further information: Can you share references or external links related to CVE-2016-0430?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0430?


Explain the CVE ID: What does the identifier CVE-2016-0431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0431.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0419.


Provide references for further information: Can you share references or external links related to CVE-2016-0431?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0431?


Explain the CVE ID: What does the identifier CVE-2016-0432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0432.

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6014, and CVE-2015-6015.


Provide references for further information: Can you share references or external links related to CVE-2016-0432?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0432?


Explain the CVE ID: What does the identifier CVE-2016-0433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0433.

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support.


Provide references for further information: Can you share references or external links related to CVE-2016-0433?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0433?


Explain the CVE ID: What does the identifier CVE-2016-0434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0434.

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and CVE-2016-0438.


Provide references for further information: Can you share references or external links related to CVE-2016-0434?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034718', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0434?


Explain the CVE ID: What does the identifier CVE-2016-0435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0435.

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.


Provide references for further information: Can you share references or external links related to CVE-2016-0435?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0435?


Explain the CVE ID: What does the identifier CVE-2016-0436 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0436.

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and CVE-2016-0438.


Provide references for further information: Can you share references or external links related to CVE-2016-0436?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0436?


Explain the CVE ID: What does the identifier CVE-2016-0437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0437.

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0438.


Provide references for further information: Can you share references or external links related to CVE-2016-0437?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0437?


Explain the CVE ID: What does the identifier CVE-2016-0438 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0438.

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437.


Provide references for further information: Can you share references or external links related to CVE-2016-0438?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0438?


Explain the CVE ID: What does the identifier CVE-2016-0439 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0439.

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0430.


Provide references for further information: Can you share references or external links related to CVE-2016-0439?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0439?


Explain the CVE ID: What does the identifier CVE-2016-0440 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0440.

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to NFSv4.


Provide references for further information: Can you share references or external links related to CVE-2016-0440?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0440?


Explain the CVE ID: What does the identifier CVE-2016-0441 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0441.

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server.


Provide references for further information: Can you share references or external links related to CVE-2016-0441?

{'name': '1034712', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0441?


Explain the CVE ID: What does the identifier CVE-2016-0442 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0442.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service.


Provide references for further information: Can you share references or external links related to CVE-2016-0442?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034734', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0442?


Explain the CVE ID: What does the identifier CVE-2016-0443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0443.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality via unknown vectors related to Agent Next Gen.


Provide references for further information: Can you share references or external links related to CVE-2016-0443?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0443?


Explain the CVE ID: What does the identifier CVE-2016-0444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0444.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0447 and CVE-2016-0449.


Provide references for further information: Can you share references or external links related to CVE-2016-0444?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0444?


Explain the CVE ID: What does the identifier CVE-2016-0445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0445.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen.


Provide references for further information: Can you share references or external links related to CVE-2016-0445?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0445?


Explain the CVE ID: What does the identifier CVE-2016-0446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0446.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality via unknown vectors related to Agent Next Gen.


Provide references for further information: Can you share references or external links related to CVE-2016-0446?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0446?


Explain the CVE ID: What does the identifier CVE-2016-0447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0447.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0449.


Provide references for further information: Can you share references or external links related to CVE-2016-0447?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0447?


Explain the CVE ID: What does the identifier CVE-2016-0448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0448.

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.


Provide references for further information: Can you share references or external links related to CVE-2016-0448?

{'name': 'openSUSE-SU-2016:0272', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html'}, {'name': '1034715', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034715'}, {'name': 'openSUSE-SU-2016:0279', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html'}, {'name': 'GLSA-201610-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201610-08'}, {'name': 'USN-2884-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2884-1'}, {'name': 'DSA-3465', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3465'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'USN-2885-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2885-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'RHSA-2016:1430', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1430'}, {'name': '81123', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81123'}, {'name': 'RHSA-2016:0049', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'}, {'name': 'openSUSE-SU-2016:0270', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html'}, {'name': 'RHSA-2016:0053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0053.html'}, {'name': 'SUSE-SU-2016:0269', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html'}, {'name': 'RHSA-2016:0067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0067.html'}, {'name': 'openSUSE-SU-2016:0263', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html'}, {'name': 'SUSE-SU-2016:0256', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'}, {'name': 'GLSA-201603-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-14'}, {'name': 'RHSA-2016:0057', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0057.html'}, {'name': 'RHSA-2016:0055', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'}, {'name': 'RHSA-2016:0054', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0054.html'}, {'name': 'RHSA-2016:0056', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0056.html'}, {'name': 'openSUSE-SU-2016:0268', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html'}, {'name': 'RHSA-2016:0050', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'}, {'name': 'DSA-3458', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3458'}, {'name': 'SUSE-SU-2016:0265', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0448?


Explain the CVE ID: What does the identifier CVE-2016-0449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0449.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0447.


Provide references for further information: Can you share references or external links related to CVE-2016-0449?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0449?


Explain the CVE ID: What does the identifier CVE-2016-0450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0450.

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect availability via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0450?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '81117', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81117'}, {'tags': ['x_refsource_MISC'], 'url': 'https://redr2e.com/cve-to-poc-cve-2016-0450/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0450?


Explain the CVE ID: What does the identifier CVE-2016-0451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0451.

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0452.


Provide references for further information: Can you share references or external links related to CVE-2016-0451?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-022'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://redr2e.com/cve-to-poc-cve-2016-0451/'}, {'name': '81125', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81125'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0451?


Explain the CVE ID: What does the identifier CVE-2016-0452 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0452.

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451.


Provide references for further information: Can you share references or external links related to CVE-2016-0452?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '81122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81122'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-023'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0452?


Explain the CVE ID: What does the identifier CVE-2016-0453 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0453.

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server.


Provide references for further information: Can you share references or external links related to CVE-2016-0453?

{'name': '1034712', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0453?


Explain the CVE ID: What does the identifier CVE-2016-0454 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0454.

Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager.


Provide references for further information: Can you share references or external links related to CVE-2016-0454?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034726', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034726'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0454?


Explain the CVE ID: What does the identifier CVE-2016-0455 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0455.

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality and availability via unknown vectors related to Agent Next Gen.


Provide references for further information: Can you share references or external links related to CVE-2016-0455?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034734', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0455?


Explain the CVE ID: What does the identifier CVE-2016-0456 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0456.

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/copxmllcmservicecontroller.js.


Provide references for further information: Can you share references or external links related to CVE-2016-0456?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034726', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034726'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-16-006-oracle-e-business-suite-xxe-injection-vulnerability/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0456?


Explain the CVE ID: What does the identifier CVE-2016-0457 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0457.

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/lcmServiceController.jsp.


Provide references for further information: Can you share references or external links related to CVE-2016-0457?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034726', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034726'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-16-007-oracle-e-business-suite-xxe-injection-vulnerability/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0457?


Explain the CVE ID: What does the identifier CVE-2016-0458 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0458.

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Kernel DAX.


Provide references for further information: Can you share references or external links related to CVE-2016-0458?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0458?


Explain the CVE ID: What does the identifier CVE-2016-0459 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0459.

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.


Provide references for further information: Can you share references or external links related to CVE-2016-0459?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0459?


Explain the CVE ID: What does the identifier CVE-2016-0460 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0460.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.55 allows remote attackers to affect integrity via unknown vectors related to Fluid Homepage and NavBar.


Provide references for further information: Can you share references or external links related to CVE-2016-0460?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '1034720', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034720'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0460?


Explain the CVE ID: What does the identifier CVE-2016-0461 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0461.

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0461?

{'name': '1034709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034709'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0461?


Explain the CVE ID: What does the identifier CVE-2016-0462 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0462.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via unknown vectors related to Multichannel Framework, a different vulnerability than CVE-2015-2650.


Provide references for further information: Can you share references or external links related to CVE-2016-0462?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0462?


Explain the CVE ID: What does the identifier CVE-2016-0463 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0463.

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality via unknown vectors related to Portal.


Provide references for further information: Can you share references or external links related to CVE-2016-0463?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0463?


Explain the CVE ID: What does the identifier CVE-2016-0464 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0464.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console.


Provide references for further information: Can you share references or external links related to CVE-2016-0464?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '81185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81185'}, {'name': '1034716', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034716'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0464?