CVE-2016-5504

Опубликовано: 25 окт. 2016

Источник: nvd

CVSS3: 4.1

CVSS2: 4.7

EPSS Низкий

Описание

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal.

Ссылки

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93679
Broken Link
Third Party Advisory
VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93679
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00118

Низкий

4.1 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-jfrv-59mj-p5v7