← Back
CWE-284

7,447 CVEs • Abstraction: Pillar

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

JSON object

Loading...

CVEs (7,447)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-5580
1Oracle
1Secure Global Desktop
May 6, 2026
Oct 25, 2016
N/A· v4
9.6 CRITICAL· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.
CVE-2016-5579
1Oracle
1Outside In Technology
May 6, 2026
Oct 25, 2016
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors...Show more
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5577, CVE-2016-5578, and CVE-2016-5588.Show less
CVE-2016-5578
1Oracle
1Outside In Technology
May 6, 2026
Oct 25, 2016
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors...Show more
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5577, CVE-2016-5579, and CVE-2016-5588.Show less
CVE-2016-5577
1Oracle
1Outside In Technology
May 6, 2026
Oct 25, 2016
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors...Show more
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5574, CVE-2016-5578, CVE-2016-5579, and CVE-2016-5588.Show less
CVE-2016-5576
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.
CVE-2016-5575
1Oracle
1Common Applications
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors rela...Show more
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.Show less
CVE-2016-5574
1Oracle
1Outside In Technology
May 6, 2026
Oct 25, 2016
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors...Show more
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5558, CVE-2016-5577, CVE-2016-5578, CVE-2016-5579, and CVE-2016-5588.Show less
CVE-2016-5571
1Oracle
1Applications Dba
May 6, 2026
Oct 25, 2016
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to A...Show more
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5567.Show less
CVE-2016-5570
1Oracle
1Applications Dba
May 6, 2026
Oct 25, 2016
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities...Show more
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities.Show less
CVE-2016-5569
1Oracle
1Flexcube Enterprise Limits And Collateral Management
May 6, 2026
Oct 25, 2016
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiali...Show more
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less
CVE-2016-5568
1Oracle
2Jdk
Jre
May 6, 2026
Oct 25, 2016
N/A· v4
9.6 CRITICAL· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
CVE-2016-5566
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5565
1Oracle
1Hospitality Opera 5 Property Services
May 6, 2026
Oct 25, 2016
N/A· v4
7.7 HIGH· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confide...Show more
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.Show less
CVE-2016-5562
1Oracle
1Iprocurement
May 6, 2026
Oct 25, 2016
N/A· v4
7.6 HIGH· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unkn...Show more
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less
CVE-2016-5560
1Oracle
1Siebel Customer Order Management
May 6, 2026
Oct 25, 2016
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to OpenUI.
CVE-2016-5557
1Oracle
1Advanced Pricing
May 6, 2026
Oct 25, 2016
N/A· v4
8.2 HIGH· v3
5.8 MEDIUM· v2
Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown ve...Show more
Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.Show less
CVE-2016-5556
1Oracle
2Jdk
Jre
May 6, 2026
Oct 25, 2016
N/A· v4
9.6 CRITICAL· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
CVE-2016-5536
1Oracle
1Platform Security For Java
May 6, 2026
Oct 25, 2016
N/A· v4
7.6 HIGH· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and...Show more
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-8281.Show less
CVE-2016-5534
1Oracle
1Siebel User Interface Framework
May 6, 2026
Oct 25, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5533
1Oracle
1Primavera P6 Enterprise Project Portfolio Management
May 6, 2026
Oct 25, 2016
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integ...Show more
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less