cnvd - cnvd-2016-05446

cnvd-2016-05446

Vulnerability from cnvd

Title: Oracle Retail Applications Oracle Retail Integration Bus组件存在未明漏洞（CNVD-2016-05446）

Description:

Oracle Retail Applications是美国甲骨文（Oracle）公司的一套零售应用商店解决方案。Oracle Retail Integration Bus（RIB）是其中的一个为零售商的调查问卷提供实时消息传递的组件。

Oracle Retail Applications中的Oracle RIB组件中的Install子组件存在未明漏洞。远程攻击者可利用该漏洞读取、更新、插入或删除数据，也可能造成拒绝服务。影响数据的保密性，完整性及可用性。

Severity: 中

Patch Name: Oracle Retail Applications Oracle Retail Integration Bus组件存在未明漏洞（CNVD-2016-05446）的补丁

Patch Description:

Oracle Retail Applications中的Oracle RIB组件中的Install子组件存在未明漏洞。远程攻击者可利用该漏洞读取、更新、插入或删除数据，也可能造成拒绝服务。影响数据的保密性，完整性及可用性。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB

Reference: http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB

Impacted products

Name
['Oracle Retail Applications Xstore 13.0', 'Oracle Retail Applications Xstore 13.1', 'Oracle Retail Applications Xstore 13.2', 'Oracle Retail Applications Xstore 14.0', 'Oracle Retail Applications Xstore 14.1', 'Oracle Retail Applications 15.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-5476"
    }
  },
  "description": "Oracle Retail Applications\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u96f6\u552e\u5e94\u7528\u5546\u5e97\u89e3\u51b3\u65b9\u6848\u3002Oracle Retail Integration Bus\uff08RIB\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4e3a\u96f6\u552e\u5546\u7684\u8c03\u67e5\u95ee\u5377\u63d0\u4f9b\u5b9e\u65f6\u6d88\u606f\u4f20\u9012\u7684\u7ec4\u4ef6\u3002\r\n\r\nOracle Retail Applications\u4e2d\u7684Oracle RIB\u7ec4\u4ef6\u4e2d\u7684Install\u5b50\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u3001\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u6570\u636e\uff0c\u4e5f\u53ef\u80fd\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\uff0c\u5b8c\u6574\u6027\u53ca\u53ef\u7528\u6027\u3002",
  "discovererName": "Oracle",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-05446",
  "openTime": "2016-07-26",
  "patchDescription": "Oracle Retail Applications\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u96f6\u552e\u5e94\u7528\u5546\u5e97\u89e3\u51b3\u65b9\u6848\u3002Oracle Retail Integration Bus\uff08RIB\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4e3a\u96f6\u552e\u5546\u7684\u8c03\u67e5\u95ee\u5377\u63d0\u4f9b\u5b9e\u65f6\u6d88\u606f\u4f20\u9012\u7684\u7ec4\u4ef6\u3002\r\n\r\nOracle Retail Applications\u4e2d\u7684Oracle RIB\u7ec4\u4ef6\u4e2d\u7684Install\u5b50\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u3001\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u6570\u636e\uff0c\u4e5f\u53ef\u80fd\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\uff0c\u5b8c\u6574\u6027\u53ca\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Retail Applications Oracle Retail Integration Bus\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2016-05446\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Retail Applications Xstore 13.0",
      "Oracle Retail Applications Xstore 13.1",
      "Oracle Retail Applications Xstore 13.2",
      "Oracle Retail Applications Xstore 14.0",
      "Oracle Retail Applications Xstore 14.1",
      "Oracle Retail Applications 15.0"
    ]
  },
  "referenceLink": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB",
  "serverity": "\u4e2d",
  "submitTime": "2016-07-21",
  "title": "Oracle Retail Applications Oracle Retail Integration Bus\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2016-05446\uff09"
}

CVE-2016-5476 (GCVE-0-2016-5476)

Vulnerability from cvelistv5

Published

2016-07-21 10:00

Modified

2024-10-11 20:34

Severity ?

CWE

Summary

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036397	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/91787	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/91897	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:01:00.361Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "name": "1036397",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036397"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "name": "91897",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91897"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-5476",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-11T19:46:51.316789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-11T20:34:15.806Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-31T09:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "name": "1036397",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036397"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "name": "91897",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91897"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2016-5476",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
            },
            {
              "name": "1036397",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036397"
            },
            {
              "name": "91787",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91787"
            },
            {
              "name": "91897",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91897"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2016-5476",
    "datePublished": "2016-07-21T10:00:00",
    "dateReserved": "2016-06-16T00:00:00",
    "dateUpdated": "2024-10-11T20:34:15.806Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted