CVE-2016-0558

2016-01-2103:01:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2016-0558

oracle service contracts

e-business suite

remote attack

nvd.

6.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

50.3%

JSON

Unspecified vulnerability in the Oracle Service Contracts component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Renewals.

CPENameOperatorVersion
oracle:service_contractsoracle service contractseq12.1.2
oracle:service_contractsoracle service contractseq11.5.10.2
oracle:service_contractsoracle service contractseq12.1.3
oracle:service_contractsoracle service contractseq12.1.1

CPE	Name	Operator	Version
oracle:service_contracts	oracle service contracts	eq	12.1.2
oracle:service_contracts	oracle service contracts	eq	11.5.10.2
oracle:service_contracts	oracle service contracts	eq	12.1.3
oracle:service_contracts	oracle service contracts	eq	12.1.1