Lucene search

OracleCVE-2016-5459

HistoryJul 21, 2016 - 10:15 a.m.

CVE-2016-5459

2016-07-2110:15:15

oracle

web.nvd.nist.gov

cve-2016-5459

oracle

siebel crm

vulnerability

ihelp

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

Confidence

Low

EPSS

0.002

Percentile

55.0%

JSON

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp.

Affected configurations

Nvd

Node

oraclesiebel_core-common_componentsMatch8.1.1

oraclesiebel_core-common_componentsMatch8.2.2

oraclesiebel_core-common_componentsMatch2014

oraclesiebel_core-common_componentsMatch2015

oraclesiebel_core-common_componentsMatch2016

VendorProductVersionCPE
oraclesiebel_core-common_components8.1.1cpe:2.3:a:oracle:siebel_core-common_components:8.1.1:*:*:*:*:*:*:*
oraclesiebel_core-common_components8.2.2cpe:2.3:a:oracle:siebel_core-common_components:8.2.2:*:*:*:*:*:*:*
oraclesiebel_core-common_components2014cpe:2.3:a:oracle:siebel_core-common_components:2014:*:*:*:*:*:*:*
oraclesiebel_core-common_components2015cpe:2.3:a:oracle:siebel_core-common_components:2015:*:*:*:*:*:*:*
oraclesiebel_core-common_components2016cpe:2.3:a:oracle:siebel_core-common_components:2016:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	siebel_core-common_components	8.1.1	cpe:2.3:a:oracle:siebel_core-common_components:8.1.1:::::::*
oracle	siebel_core-common_components	8.2.2	cpe:2.3:a:oracle:siebel_core-common_components:8.2.2:::::::*
oracle	siebel_core-common_components	2014	cpe:2.3:a:oracle:siebel_core-common_components:2014:::::::*
oracle	siebel_core-common_components	2015	cpe:2.3:a:oracle:siebel_core-common_components:2015:::::::*
oracle	siebel_core-common_components	2016	cpe:2.3:a:oracle:siebel_core-common_components:2016:::::::*

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91985

www.securitytracker.com/id/1036400

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

Confidence

Low

EPSS

0.002

Percentile

55.0%

JSON

Related for CVE-2016-5459