CVE-2016-5482

Published: Oct 25, 2016Modified: May 6, 2026

8.2

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Exploitability: 2.8 / Impact: 4.7

Source: NVD

Description

Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Affected (6)

Products: Oracle: Commerce Guided Search

Oracle

1 product

Commerce Guided Search

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Commerce Guided Search	Version 6.2.2
Oracle Commerce Guided Search	Version 6.3.0
Oracle Commerce Guided Search	Version 6.4.1.2
Oracle Commerce Guided Search	Version 6.5.0
Oracle Commerce Guided Search	Version 6.5.1
Oracle Commerce Guided Search	Version 6.5.2

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/93664

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/93664

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.