{"id":"CVE-2016-5601","description":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.","cvssScore":6.3,"cvssVersion":"3.0","cvssVector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N","cvssMetrics":[{"version":"3.0","score":6.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"},{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"cwes":["CWE-284"],"resolved":"NO-FIX-IDENTIFIED","published":"2016-10-25","lastModified":"2026-06-17","affectedProducts":[{"vendor":"oracle","product":"weblogic server","version":"12.1.3.0.0"},{"vendor":"oracle","product":"weblogic server","version":"12.2.1.0.0"},{"vendor":"oracle","product":"weblogic server","version":"12.2.1.1.0"}],"totalAffectedProducts":1,"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93704","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1037052","source":"secalert_us@oracle.com"}],"reasoning":{"decidingSource":"h2-history","decidingReason":"Manual classification assigned status: NO-FIX-IDENTIFIED","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"matched","status":"NO-FIX-IDENTIFIED","detail":"Found in legacy manual classifications","decisive":true}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update October 2016","releaseType":"CPU","quarter":"2016-Q4","url":"https://www.oracle.com/security-alerts/cpuoct2016.html","products":[{"product":"Oracle Fusion Middleware","component":"CIE Related Components","affectedVersions":"12.1.3.0, 12.2.1.0, 12.2.1.1"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"not-needed"},"review":{"state":"human","basis":"manual-review"}},"h2Comments":"## Manual Classification Context\n\n\n**Labels:** HTTP, CIE RELATED COMPONENTS\n\n**Products:** ORACLE WEBLOGIC SERVER, ORACLE FUSION MIDDLEWARE","signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.00395,"percentile":0.33088},"ssvc":{"available":true,"exploitation":"none","automatable":"no","technicalImpact":"partial"}}