Lucene search

[email protected]CVE-2016-3444

HistoryJul 21, 2016 - 10:12 a.m.

CVE-2016-3444

2016-07-2110:12:09

[email protected]

web.nvd.nist.gov

oracle

retail

integration bus

cve-2016-3444

vulnerability

security

confidentiality

integrity

availability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.

Affected configurations

NVD

Node

oracleretail_integration_busMatch13.0

oracleretail_integration_busMatch13.1

oracleretail_integration_busMatch13.2

oracleretail_integration_busMatch14.0

oracleretail_integration_busMatch14.1

oracleretail_integration_busMatch15.0

CPENameOperatorVersion
oracle:retail_integration_busoracle retail integration buseq13.0
oracle:retail_integration_busoracle retail integration buseq13.1
oracle:retail_integration_busoracle retail integration buseq13.2
oracle:retail_integration_busoracle retail integration buseq14.0
oracle:retail_integration_busoracle retail integration buseq14.1
oracle:retail_integration_busoracle retail integration buseq15.0

CPE	Name	Operator	Version
oracle:retail_integration_bus	oracle retail integration bus	eq	13.0
oracle:retail_integration_bus	oracle retail integration bus	eq	13.1
oracle:retail_integration_bus	oracle retail integration bus	eq	13.2
oracle:retail_integration_bus	oracle retail integration bus	eq	14.0
oracle:retail_integration_bus	oracle retail integration bus	eq	14.1
oracle:retail_integration_bus	oracle retail integration bus	eq	15.0

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91883

www.securitytracker.com/id/1036397

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

Related for CVE-2016-3444

prion1 nvd1 cvelist1 oracle1