VulnerabilityModified

CVE-2016-0671

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.

LOW 3.7EPSS 1.36%

Does this matter?

Lower severity and a low EPSS score (1.36%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.

CVSS 3.0: 3.7 LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 1.36% probability · 70th percentile
CISA KEV: Not listed
Affected: oracle/http server
Source: secalert_us@oracle.com

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1035617
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1035617

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.