« Volver al listado

CVE-2016-0522

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Framework.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Oracle — Retail Open Commerce Platform Cloud Service

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-0522",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-01-21T03:01:10.247",
  "references": [
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034718",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034718",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Framework."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Oracle Retail Open Commerce Platform Cloud Service en Oracle Retail Applications 3.5, 4.5, 4.7 y 5.0 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Framework."
    }
  ],
  "lastModified": "2026-06-17T00:37:41.613",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15333676-3AB9-4636-94A8-319840994148"
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D395232-780B-494A-8DAA-D3BAE71707A7"
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:4.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F9CD39B-381D-4B69-BECB-38CEA5E7B1F9"
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform_cloud_service:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EB0E2F7-2697-484B-BD35-23B1022D819D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}