ID CVE-2016-0499
Summary Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-4794. Per Oracle: The CVSS score is 9.0 only on Windows for Database versions prior to 12c. The CVSS is 6.5 (Confidentiality, Integrity and Availability is "Partial+") for Database 12c on Windows and for all versions of Database on Linux, Unix and other platforms
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
CVSS
Base: 9.0 (as of 07-12-2016 - 19:34)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:S/C:C/I:C/A:C
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack 1034709
Last major update 07-12-2016 - 19:34
Published 21-01-2016 - 03:00
Last modified 07-12-2016 - 19:34
Back to Top