CVE-2016-3506 Information

Description

Unspecified vulnerability in the JDBC component in Oracle Database Server 11.2.0.4 12.1.0.1 and 12.1.0.2; the Oracle Retail Xstore Point of Service 5.5 6.0 6.5 7.0 7.1 15.0 and 16.0; the Oracle Retail Warehouse Management System 14.04 14.1.3 and 15.0.1; the Oracle Retail Workforce Management 1.60.7 and 1.64.0; the Oracle Retail Clearance Optimization Engine 13.4; the Oracle Retail Markdown Optimization 13.4 and 14.0; and Oracle Retail Merchandising System 16.0 allows remote attackers to affect confidentiality integrity and availability via unknown vectors.

CVSS Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.securityfocus.com/bid/91787 http://www.securityfocus.com/bid/91867 http://www.securitytracker.com/id/1036363

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.1