Lucene search

[email protected]CVE-2016-5476

HistoryJul 21, 2016 - 10:15 a.m.

CVE-2016-5476

2016-07-2110:15:33

[email protected]

web.nvd.nist.gov

cve-2016-5476

oracle

retail

integration bus

vulnerability

confidentiality

integrity

availability

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.

Affected configurations

NVD

Node

oracleretail_integration_busMatch13.0

oracleretail_integration_busMatch13.1

oracleretail_integration_busMatch13.2

oracleretail_integration_busMatch14.0

oracleretail_integration_busMatch14.1

oracleretail_integration_busMatch15.0

CPENameOperatorVersion
oracle:retail_integration_busoracle retail integration buseq13.0
oracle:retail_integration_busoracle retail integration buseq13.1
oracle:retail_integration_busoracle retail integration buseq13.2
oracle:retail_integration_busoracle retail integration buseq14.0
oracle:retail_integration_busoracle retail integration buseq14.1
oracle:retail_integration_busoracle retail integration buseq15.0

CPE	Name	Operator	Version
oracle:retail_integration_bus	oracle retail integration bus	eq	13.0
oracle:retail_integration_bus	oracle retail integration bus	eq	13.1
oracle:retail_integration_bus	oracle retail integration bus	eq	13.2
oracle:retail_integration_bus	oracle retail integration bus	eq	14.0
oracle:retail_integration_bus	oracle retail integration bus	eq	14.1
oracle:retail_integration_bus	oracle retail integration bus	eq	15.0

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91897

www.securitytracker.com/id/1036397

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

Related for CVE-2016-5476

cvelist1 nvd1 prion1 oracle1