What is the CVSS score of CVE-2016-5562?

CVE-2016-5562 has a CVSS 3.0 base score of 7.6 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2016-5562?

Yes, a patch is available for CVE-2016-5562. Update the affected software to the latest version immediately.

Iprocurement CVE-2016-5562

HIGH

Improper Access Control (CWE-284)

2016-10-25 secalert_us@oracle.com

Oracle Authentication Bypass Iprocurement

7.6

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Oct 25, 2016 - 14:30 cve.org

HIGH 7.6

DescriptionCVE.org

Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-284. Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Affected products include: Oracle Iprocurement. Version information: through 12.1.3.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.