Lucene search

OracleCVE-2016-3475

HistoryJul 21, 2016 - 10:12 a.m.

CVE-2016-3475

2016-07-2110:12:28

oracle

web.nvd.nist.gov

cve-2016-3475

oracle

siebel crm

nvd

vulnerability

information manager console

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

Low

EPSS

0.001

Percentile

45.1%

JSON

Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console.

Affected configurations

Nvd

Node

oracleknowledgeMatch8.5

VendorProductVersionCPE
oracleknowledge8.5cpe:2.3:a:oracle:knowledge:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	knowledge	8.5	cpe:2.3:a:oracle:knowledge:8.5:::::::*

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91944

www.securitytracker.com/id/1036400

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

Low

EPSS

0.001

Percentile

45.1%

JSON

Related for CVE-2016-3475