Lucene search

[email protected]CVE-2016-3494

HistoryJul 21, 2016 - 10:12 a.m.

CVE-2016-3494

2016-07-2110:12:47

[email protected]

web.nvd.nist.gov

cve-2016-3494

enterprise manager ops center

oracle

vulnerability

grid control 12.1.4

grid control 12.2.2

grid control 12.3.2

os provisioning

nvd

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.

Affected configurations

NVD

Node

oracleenterprise_manager_ops_centerMatch12.1.4

oracleenterprise_manager_ops_centerMatch12.2.2

oracleenterprise_manager_ops_centerMatch12.3.2

CPENameOperatorVersion
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq12.1.4
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq12.2.2
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq12.3.2

CPE	Name	Operator	Version
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	12.1.4
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	12.2.2
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	12.3.2

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91872

www.securitytracker.com/id/1036406

Social References

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

Related for CVE-2016-3494

prion1 cvelist1 nvd1 oracle1