CVE-2016-5599

{"id": "CVE-2016-5599", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2016-10-25T14:31:11.000", "references": [{"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/93619", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/93619", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Advanced Supply Chain Planning en Oracle Supply Chain Products Suite 12.2.3 hasta la versi\u00f3n 12.2.5 permite a atacantes remotos afectar la confidencialidad y la integridad a trav\u00e9s de vectores relacionados con MscObieeSrvlt."}], "lastModified": "2024-11-21T02:54:40.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "952857D7-96BC-4C29-8C32-1AB7D802E4CB"}, {"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F886F24-76CC-4D15-9DDD-43BEA53143E6"}, {"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34672D88-70BC-48A5-A2F1-431F72A1C5EE"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}