Skip to main content

Database Server CVE-2016-5498

LOW
Information Exposure (CWE-200)
2016-10-25 secalert_us@oracle.com
3.3
CVSS 3.0 · NVD

Severity by source

NVD PRIMARY
3.3 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 25, 2016 - 14:29 cve.org
LOW 3.3

DescriptionCVE.org

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499.

AnalysisAI

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499. Affected products include: Oracle Database Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.

CVE-2012-1675 HIGH POC
7.5 May 08

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.

CVE-2012-3137 MEDIUM POC
6.4 Sep 21

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

CVE-2016-9054 CRITICAL POC
9.8 Jan 26

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Serv

CVE-2016-9052 CRITICAL POC
9.8 Jan 26

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Serv

CVE-2016-9053 CRITICAL POC
9.8 Feb 21

An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Datab

CVE-2016-9051 CRITICAL POC
9.8 Feb 21

An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospik

CVE-2016-2381 HIGH
7.5 Apr 08

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate e

CVE-2016-9843 CRITICAL
9.8 May 23

The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via v

CVE-2016-9841 CRITICAL
9.8 May 23

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointe

CVE-2014-6577 MEDIUM POC
6.8 Jan 21

Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.

CVE-2016-9050 HIGH POC
8.2 Jan 26

An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database

CVE-2016-9049 HIGH POC
7.5 Feb 21

An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0

Share

CVE-2016-5498 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy