Lucene search

OracleCVE-2016-5539

HistoryOct 25, 2016 - 2:30 p.m.

CVE-2016-5539

2016-10-2514:30:15

oracle

web.nvd.nist.gov

cve-2016-5539

oracle

retail

xstore payment

vulnerability

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

9.7%

JSON

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Affected configurations

Nvd

Node

oraclemicros_xstore_paymentMatch1.0

VendorProductVersionCPE
oraclemicros_xstore_payment1.0cpe:2.3:a:oracle:micros_xstore_payment:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	micros_xstore_payment	1.0	cpe:2.3:a:oracle:micros_xstore_payment:1.0:::::::*

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

www.securityfocus.com/bid/93663

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

9.7%

JSON

Related for CVE-2016-5539