CVE-2016-5482: High severity oracle commerce vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Affected Software

6 affected components

Oracle Commerce Guided Search=6.2.2

Oracle Commerce Guided Search=6.3.0

Oracle Commerce Guided Search=6.4.1.2

Oracle Commerce Guided Search=6.5.0

Oracle Commerce Guided Search=6.5.1

Oracle Commerce Guided Search=6.5.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5482?

CVE-2016-5482 has an unspecified severity level that may impact confidentiality and integrity.

How do I fix CVE-2016-5482?

To mitigate CVE-2016-5482, upgrade to a patched version of Oracle Commerce Guided Search as recommended by Oracle.

Which versions are affected by CVE-2016-5482?

CVE-2016-5482 impacts Oracle Commerce Guided Search versions 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1, and 6.5.2.

What types of attacks are associated with CVE-2016-5482?

CVE-2016-5482 allows remote attackers to exploit unknown vectors, affecting the security of the application.

Is there a workaround for CVE-2016-5482?

Currently, there are no publicly documented workarounds for CVE-2016-5482 other than applying the available patches.