Lucene search

OracleCVE-2016-3429

HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-3429

2016-04-2111:00:23

oracle

web.nvd.nist.gov

cve-2016-3429

oracle

retail

xstore point of service

vulnerability

confidentiality

integrity

nvd

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:P/A:N

CVSS3

4.5

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

AI Score

4.3

Confidence

Low

EPSS

0.002

Percentile

56.1%

JSON

Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.

Affected configurations

Nvd

Node

oracleretail_xstore_point_of_serviceMatch5.0

oracleretail_xstore_point_of_serviceMatch5.5

oracleretail_xstore_point_of_serviceMatch6.0

oracleretail_xstore_point_of_serviceMatch6.5

oracleretail_xstore_point_of_serviceMatch7.0

oracleretail_xstore_point_of_serviceMatch7.1

VendorProductVersionCPE
oracleretail_xstore_point_of_service5.0cpe:2.3:a:oracle:retail_xstore_point_of_service:5.0:*:*:*:*:*:*:*
oracleretail_xstore_point_of_service5.5cpe:2.3:a:oracle:retail_xstore_point_of_service:5.5:*:*:*:*:*:*:*
oracleretail_xstore_point_of_service6.0cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0:*:*:*:*:*:*:*
oracleretail_xstore_point_of_service6.5cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5:*:*:*:*:*:*:*
oracleretail_xstore_point_of_service7.0cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*
oracleretail_xstore_point_of_service7.1cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	retail_xstore_point_of_service	5.0	cpe:2.3:a:oracle:retail_xstore_point_of_service:5.0:::::::*
oracle	retail_xstore_point_of_service	5.5	cpe:2.3:a:oracle:retail_xstore_point_of_service:5.5:::::::*
oracle	retail_xstore_point_of_service	6.0	cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0:::::::*
oracle	retail_xstore_point_of_service	6.5	cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5:::::::*
oracle	retail_xstore_point_of_service	7.0	cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:::::::*
oracle	retail_xstore_point_of_service	7.1	cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:::::::*

References

www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

www.securitytracker.com/id/1035600

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:P/A:N

CVSS3

4.5

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

AI Score

4.3

Confidence

Low

EPSS

0.002

Percentile

56.1%

JSON

Related for CVE-2016-3429