CVE-2016-5599 — CRITICAL (9.1)

Vulnerability Description

Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.

CVSS Score

9.1

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Oracle	Advanced Supply Chain Planning	12.2.3

Related Weaknesses (CWE)

CWE-284

References

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlPatchVendor Advisory
http://www.securityfocus.com/bid/93619
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlPatchVendor Advisory
http://www.securityfocus.com/bid/93619

FAQ

What is CVE-2016-5599?

CVE-2016-5599 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integ...

How severe is CVE-2016-5599?

CVE-2016-5599 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-5599?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Advanced Supply Chain Planning.