« Volver al listado

CVE-2016-5763

Estado: ModificadaCrítica (9.1)—

Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Novell — Open Enterprise Server 11Novell — Open Enterprise Server 2015

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-5763",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Novell Open Enterprise Server 11 and 2015",
          "versions": [
            {
              "status": "affected",
              "version": "Novell Open Enterprise Server 11 and 2015"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-11-15T19:30:01.797",
  "references": [
    {
      "url": "http://download.novell.com/Download?buildid=3Ho1yp5JOXA~",
      "source": "security@opentext.com"
    },
    {
      "url": "http://download.novell.com/Download?buildid=Fj0Hdns7mxA~",
      "source": "security@opentext.com"
    },
    {
      "url": "http://download.novell.com/Download?buildid=dfqmrymc0Rg~",
      "source": "security@opentext.com"
    },
    {
      "url": "http://download.novell.com/Download?buildid=s9_RxhgC8KU~",
      "source": "security@opentext.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/94348",
      "source": "security@opentext.com"
    },
    {
      "url": "http://download.novell.com/Download?buildid=3Ho1yp5JOXA~",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://download.novell.com/Download?buildid=Fj0Hdns7mxA~",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://download.novell.com/Download?buildid=dfqmrymc0Rg~",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://download.novell.com/Download?buildid=s9_RxhgC8KU~",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/94348",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en Novell Open Enterprise Server (OES2015 SP1 en versiones anteriores a Scheduled Maintenance Update 10992, OES2015 en versiones anteriores a Scheduled Maintenance Update 10990, OES11 SP3 en versiones anteriores a Scheduled Maintenance Update 10991, OES11 SP2 en versiones anteriores a Scheduled Maintenance Update 10989) podría permitir a atacantes remotos autenticados llevar a cabo un acceso y modificación no autorizado de archivos."
    }
  ],
  "lastModified": "2026-06-17T00:50:00.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:novell:open_enterprise_server_11:*:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D2E9D90-409F-422E-8CE7-1C543EEEEDBF"
            },
            {
              "criteria": "cpe:2.3:a:novell:open_enterprise_server_11:*:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B194D36-14D4-40DC-B07D-59F9DB96EEBF"
            },
            {
              "criteria": "cpe:2.3:a:novell:open_enterprise_server_2015:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E56590D0-3D82-4822-BF3B-69BBFCAF7960"
            },
            {
              "criteria": "cpe:2.3:a:novell:open_enterprise_server_2015:*:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "264D85F8-3B9F-4DD8-91D3-DB0771956D51"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}