CVE-2016-8281

Опубликовано: 25 окт. 2016

Источник: nvd

CVSS3: 7.6

CVSS2: 6.5

EPSS Низкий

Описание

Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-5536.

Ссылки

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93771
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037051
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93771
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037051

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:platform_security_for_java:12.1.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:platform_security_for_java:12.2.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:platform_security_for_java:12.2.1.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00475

Низкий

7.6 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-g5j9-qj8v-w5r9