CVE-2016-5455

Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/91863
http://www.securitytracker.com/id/1036401

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:communications_messaging_server:6.3:::::::*
	cpe:2.3:a:oracle:communications_messaging_server:7.0:::::::*
	cpe:2.3:a:oracle:communications_messaging_server:8.0:::::::*

History

No history.

Information

Published : 2016-07-21 10:15

Updated : 2023-12-10 11:46

NVD link : CVE-2016-5455

Mitre link : CVE-2016-5455

CVE.ORG link : CVE-2016-5455

JSON object : View

Products Affected

oracle

communications_messaging_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2016-5455", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2016-07-21T10:15:11.677", "references": [{"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/91787", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/91863", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1036401", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Communications Messaging Server en Oracle Communications Applications 6.3, 7.0 y 8.0 permite a atacantes remotos afectar la confidencialidad a trav\u00e9s de vectores relacionados con Multiplexor."}], "lastModified": "2017-09-01T01:29:29.883", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:communications_messaging_server:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4CFAEC6-191E-4AA2-9106-5E93A71E6AD0"}, {"criteria": "cpe:2.3:a:oracle:communications_messaging_server:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C190673-EC92-4CD5-ADED-E3B5E5611360"}, {"criteria": "cpe:2.3:a:oracle:communications_messaging_server:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA1C04F6-ED13-4FB4-BA9B-BBB85D6007F1"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}