Vulnerability in Oracle Retail_integration_bus

CVE-2016-5476

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vect…

EPSS: 0.008 (74.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.

Affected products

References

  • secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • 1036397 (vdb-entry, x_refsource_SECTRACK)
  • 91787 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • 91897 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-5476?
CVE-2016-5476 is a high-severity vulnerability in Oracle Retail_integration_bus. CVSS score: 7.6/10. Published 2016-07-21.
How severe is CVE-2016-5476?
High severity. CVSS v3 base score is 7.6 out of 10.