Lucene search

[email protected]CVE-2016-5482

HistoryOct 25, 2016 - 2:29 p.m.

CVE-2016-5482

2016-10-2514:29:19

CWE-284

[email protected]

web.nvd.nist.gov

cve-2016-5482

oracle commerce

guided search

vulnerability

confidentiality

integrity

nvd

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

55.9%

JSON

Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Affected configurations

NVD

Node

oraclecommerce_guided_searchMatch6.2.2

oraclecommerce_guided_searchMatch6.3.0

oraclecommerce_guided_searchMatch6.4.1.2

oraclecommerce_guided_searchMatch6.5.0

oraclecommerce_guided_searchMatch6.5.1

oraclecommerce_guided_searchMatch6.5.2

CPENameOperatorVersion
oracle:commerce_guided_searchoracle commerce guided searcheq6.2.2
oracle:commerce_guided_searchoracle commerce guided searcheq6.3.0
oracle:commerce_guided_searchoracle commerce guided searcheq6.4.1.2
oracle:commerce_guided_searchoracle commerce guided searcheq6.5.0
oracle:commerce_guided_searchoracle commerce guided searcheq6.5.1
oracle:commerce_guided_searchoracle commerce guided searcheq6.5.2

CPE	Name	Operator	Version
oracle:commerce_guided_search	oracle commerce guided search	eq	6.2.2
oracle:commerce_guided_search	oracle commerce guided search	eq	6.3.0
oracle:commerce_guided_search	oracle commerce guided search	eq	6.4.1.2
oracle:commerce_guided_search	oracle commerce guided search	eq	6.5.0
oracle:commerce_guided_search	oracle commerce guided search	eq	6.5.1
oracle:commerce_guided_search	oracle commerce guided search	eq	6.5.2

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

www.securityfocus.com/bid/93664

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

55.9%

JSON

Related for CVE-2016-5482

prion1 nvd1 cvelist1 oracle1