Lucene search

[email protected]CVE-2016-3558

HistoryJul 21, 2016 - 10:13 a.m.

CVE-2016-3558

2016-07-2110:13:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2016-3558

oracle

email center

e-business suite

remote attackers

integrity

vulnerability

nvd

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

4.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.7%

JSON

Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than CVE-2016-3559.

CPENameOperatorVersion
oracle:email_centeroracle email centereq12.2.4
oracle:email_centeroracle email centereq12.2.5
oracle:email_centeroracle email centereq12.2.3
oracle:email_centeroracle email centereq12.1.2
oracle:email_centeroracle email centereq12.1.3
oracle:email_centeroracle email centereq12.1.1

CPE	Name	Operator	Version
oracle:email_center	oracle email center	eq	12.2.4
oracle:email_center	oracle email center	eq	12.2.5
oracle:email_center	oracle email center	eq	12.2.3
oracle:email_center	oracle email center	eq	12.1.2
oracle:email_center	oracle email center	eq	12.1.3
oracle:email_center	oracle email center	eq	12.1.1

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91899

www.securitytracker.com/id/1036403

Social References

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

4.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.7%

JSON

Related for CVE-2016-3558

prion2 cvelist2 cve1 nessus1 oracle1