CVE-2016-3545

Опубликовано: 21 июл. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.

Ссылки

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91787
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91882
http://www.securitytracker.com/id/1036403
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91787
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91882
http://www.securitytracker.com/id/1036403

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00415

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-8grq-p3rh-q3cg