CVE-2016-5461
published 2016-07-21CVE-2016-5461: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote…
PriorityP335medium6.5CVSS 3.0
AVNACLPRLUINSUCHINAN
EPSS
2.15%
80.1th percentile
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | nss | >= 0 < 2:3.28.4-0ubuntu0.14.04.1 | 2:3.28.4-0ubuntu0.14.04.1 |
| mozilla | nss | >= 0 < 2:3.28.4-0ubuntu0.16.04.1 | 2:3.28.4-0ubuntu0.16.04.1 |
| oracle | siebel_core-server_framework | — | — |
| oracle | siebel_core-server_framework | — | — |
| oracle | siebel_core-server_framework | — | — |
| oracle | siebel_core-server_framework | — | — |
| oracle | siebel_core-server_framework | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6r44-q6q3-mhmq: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8
ghsa_unreviewed·2022-05-17
CVE-2016-5461 [MEDIUM] GHSA-6r44-q6q3-mhmq: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8
Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager.
OSV
nss vulnerabilities
osv·2017-04-27·CVSS 7.5
CVE-2016-2183 nss vulnerabilities
nss vulnerabilities
Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES
ciphers were vulnerable to birthday attacks. A remote attacker could
possibly use this flaw to obtain clear text data from long encrypted
sessions. This update causes NSS to limit use of the same symmetric key.
(CVE-2016-2183)
It was discovered that NSS incorrectly handled Base64 decoding. A remote
attacker could use this flaw to cause NSS to crash, resulting in a denial
of service, or possibly execute arbitrary code. (CVE-2017-5461)
This update refreshes the NSS package to version 3.28.4 which includes
the latest CA certificate bundle.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91964http://www.securitytracker.com/id/1036400http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91964http://www.securitytracker.com/id/1036400
2016-07-21
Published