Lucene search

K
cve[email protected]CVE-2016-5489
HistoryOct 25, 2016 - 2:29 p.m.

CVE-2016-5489

2016-10-2514:29:24
web.nvd.nist.gov
14
cve-2016-5489
oracle
istore
e-business suite
vulnerability
confidentiality
integrity
nvd
runtime catalog

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.

Affected configurations

NVD
Node
oracleistoreMatch12.1.1
OR
oracleistoreMatch12.1.2
OR
oracleistoreMatch12.1.3
OR
oracleistoreMatch12.2.3
OR
oracleistoreMatch12.2.4

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

Related for CVE-2016-5489