Lucene search

[email protected]CVE-2016-5557

HistoryOct 25, 2016 - 2:30 p.m.

CVE-2016-5557

2016-10-2514:30:24

CWE-284

[email protected]

web.nvd.nist.gov

oracle

e-business suite

cve-2016-5557

vulnerability

nvd

confidentiality

integrity

remote attackers

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

59.7%

JSON

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Affected configurations

NVD

Node

oracleadvanced_pricingMatch12.1.1

oracleadvanced_pricingMatch12.1.2

oracleadvanced_pricingMatch12.1.3

oracleadvanced_pricingMatch12.2.3

oracleadvanced_pricingMatch12.2.4

oracleadvanced_pricingMatch12.2.5

oracleadvanced_pricingMatch12.2.6

CPENameOperatorVersion
oracle:advanced_pricingoracle advanced pricingeq12.1.1
oracle:advanced_pricingoracle advanced pricingeq12.1.2
oracle:advanced_pricingoracle advanced pricingeq12.1.3
oracle:advanced_pricingoracle advanced pricingeq12.2.3
oracle:advanced_pricingoracle advanced pricingeq12.2.4
oracle:advanced_pricingoracle advanced pricingeq12.2.5
oracle:advanced_pricingoracle advanced pricingeq12.2.6

CPE	Name	Operator	Version
oracle:advanced_pricing	oracle advanced pricing	eq	12.1.1
oracle:advanced_pricing	oracle advanced pricing	eq	12.1.2
oracle:advanced_pricing	oracle advanced pricing	eq	12.1.3
oracle:advanced_pricing	oracle advanced pricing	eq	12.2.3
oracle:advanced_pricing	oracle advanced pricing	eq	12.2.4
oracle:advanced_pricing	oracle advanced pricing	eq	12.2.5
oracle:advanced_pricing	oracle advanced pricing	eq	12.2.6

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

www.securityfocus.com/bid/93690

www.securitytracker.com/id/1037038

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

7.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

59.7%

JSON

Related for CVE-2016-5557

nvd1 cvelist1 prion1 nessus1 oracle1