Medium severity · published Jul 21, 2016
CVE-2016-3611
Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via…
5.4
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RO
Retail Order Broker Cloud Service · Oracle
15.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-3611
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-3611
Patch
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Third Party Advisory
http://www.securityfocus.com/bid/91787
www.securityfocus.com
http://www.securityfocus.com/bid/91901
www.securitytracker.com
http://www.securitytracker.com/id/1036397
More from Retail Order Broker Cloud Service
9.8
CVE-2015-3253
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a…
8.8
CVE-2016-0635
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences…
6.1
CVE-2020-13954
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses
3.7
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
–
CVE-2016-0500
Unspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle Retail Applications 4.0 and 4.1 allows remote attackers to affect confidentiality,…