Lucene search

K
cveOracleCVE-2015-0495
HistoryApr 16, 2015 - 4:59 p.m.

CVE-2015-0495

2015-04-1616:59:45
oracle
web.nvd.nist.gov
31
oracle commerce
vulnerability
oracle
commerce platform
confidentiality
integrity
availability
nvd
cve-2015-0495

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

Low

EPSS

0.901

Percentile

98.8%

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.

Affected configurations

Nvd
Node
oraclecommerce_guided_search_and_experience_managerMatch3.0
OR
oraclecommerce_guided_search_and_experience_managerMatch3.1.0
OR
oraclecommerce_guided_search_and_experience_managerMatch3.1.1
OR
oraclecommerce_guided_search_and_experience_managerMatch3.1.2
OR
oraclecommerce_guided_search_and_experience_managerMatch11.0
OR
oraclecommerce_guided_search_and_experience_managerMatch11.1
VendorProductVersionCPE
oraclecommerce_guided_search_and_experience_manager3.0cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:3.0:*:*:*:*:*:*:*
oraclecommerce_guided_search_and_experience_manager3.1.0cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:3.1.0:*:*:*:*:*:*:*
oraclecommerce_guided_search_and_experience_manager3.1.1cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:3.1.1:*:*:*:*:*:*:*
oraclecommerce_guided_search_and_experience_manager3.1.2cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:3.1.2:*:*:*:*:*:*:*
oraclecommerce_guided_search_and_experience_manager11.0cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:11.0:*:*:*:*:*:*:*
oraclecommerce_guided_search_and_experience_manager11.1cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:11.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

Low

EPSS

0.901

Percentile

98.8%