ID CVE-2016-3551
Summary Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:weblogic_server:11.1.1.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server:11.1.1.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server:11.1.1.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server:11.1.1.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 29-07-2017 - 01:34)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 93658
confirm http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
sectrack 1037051
Last major update 29-07-2017 - 01:34
Published 25-10-2016 - 14:29
Last modified 29-07-2017 - 01:34
Back to Top