Vulnerability CVE-2016-3429

Vulnerability Name:

CVE-2016-3429 (CCN-112446)

Assigned:

2016-04-19

Published:

2016-04-19

Updated:

2016-12-03

Summary:

Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.

CVSS v3 Severity:

4.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Physical Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): Low Availibility (A): None

6.8 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:P/A:N)
4.0 Medium (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Partial Availibility (A): None

5.4 Medium (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:P/A:N)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Partial Availibility (A): None