CVE-2016-5599

Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.

CVSS v3 9.1 CRITICAL
CVSS v2.0 6.4 MEDIUM

9.1^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/93619

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.3:::::::*
	cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.4:::::::*
	cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.5:::::::*

History

No history.

Information

Published : 2016-10-25 14:31

Updated : 2023-12-10 11:46

NVD link : CVE-2016-5599

Mitre link : CVE-2016-5599

CVE.ORG link : CVE-2016-5599

JSON object : View

Products Affected

oracle

advanced_supply_chain_planning

CWE

CWE-284

Improper Access Control

{"id": "CVE-2016-5599", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2016-10-25T14:31:11.000", "references": [{"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/93619", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Advanced Supply Chain Planning en Oracle Supply Chain Products Suite 12.2.3 hasta la versi\u00f3n 12.2.5 permite a atacantes remotos afectar la confidencialidad y la integridad a trav\u00e9s de vectores relacionados con MscObieeSrvlt."}], "lastModified": "2016-11-28T20:27:50.537", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "952857D7-96BC-4C29-8C32-1AB7D802E4CB"}, {"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F886F24-76CC-4D15-9DDD-43BEA53143E6"}, {"criteria": "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34672D88-70BC-48A5-A2F1-431F72A1C5EE"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}