Lucene search

K
cveOracleCVE-2016-3565
HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-3565

2016-07-2110:14:01
oracle
web.nvd.nist.gov
23
oracle
retail
order broker
cve-2016-3565
nvd
vulnerability
confidentiality
integrity
availability
system administration

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

44.8%

Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 5.1 and 5.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to System Administration.

Affected configurations

Nvd
Node
oracleretail_order_brokerMatch5.1
OR
oracleretail_order_brokerMatch5.2
VendorProductVersionCPE
oracleretail_order_broker5.1cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*
oracleretail_order_broker5.2cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for CVE-2016-3565