PT-2016-5526 · Oracle · Oracle Retail Warehouse Management System+6

Published 2016-07-21 · Updated 2018-07-19 · CVE-2016-3506

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2 Oracle Retail Xstore Point of Service versions 5.5, 6.0, 6.5, 7.0, 7.1, 15.0, and 16.0 Oracle Retail Warehouse Management System versions 14.04, 14.1.3, and 15.0.1 Oracle Retail Workforce Management versions 1.60.7, and 1.64.0 Oracle Retail Clearance Optimization Engine version 13.4 Oracle Retail Markdown Optimization versions 13.4 and 14.0 Oracle Retail Merchandising System version 16.0

Description The issue affects confidentiality, integrity, and availability, but the specific details about the vulnerability and its exploitation are not provided. There is no information available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2, update to a version that includes the fix for this issue. For Oracle Retail Xstore Point of Service versions 5.5, 6.0, 6.5, 7.0, 7.1, 15.0, and 16.0, update to a version that includes the fix for this issue. For Oracle Retail Warehouse Management System versions 14.04, 14.1.3, and 15.0.1, update to a version that includes the fix for this issue. For Oracle Retail Workforce Management versions 1.60.7, and 1.64.0, update to a version that includes the fix for this issue. For Oracle Retail Clearance Optimization Engine version 13.4, update to a version that includes the fix for this issue. For Oracle Retail Markdown Optimization versions 13.4 and 14.0, update to a version that includes the fix for this issue. For Oracle Retail Merchandising System version 16.0, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-3506

Affected Products

Oracle Database Server

Oracle Retail Clearance Optimization Engine

Oracle Retail Markdown Optimization

Oracle Retail Merchandising System

Oracle Retail Warehouse Management System

Oracle Retail Workforce Management

Oracle Retail Xstore Point Of Service

References · 11

• https://osv.dev/vulnerability/CVE-2016-3506 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3506 · Security Note
• http://oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html · Note
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Note
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Note
• http://securitytracker.com/id/1036363 · Note
• http://oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · Note
• http://securityfocus.com/bid/91867 · Note
• http://oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Note
• http://securityfocus.com/bid/91787 · Note