CVE-2016-0439: Medium severity oracle fusion middleware vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality via vectors related to SSL support, a different vulnerability than CVE-2016-0430.

Affected Software

2 affected components

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=11.1.1.9

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0439?

CVE-2016-0439 has a high severity rating due to its potential impact on the confidentiality of affected systems.

How do I fix CVE-2016-0439?

To fix CVE-2016-0439, apply the latest security patches provided by Oracle for Fusion Middleware versions 11.1.1.7.0 and 11.1.1.9.0.

Which versions of Oracle Fusion Middleware are affected by CVE-2016-0439?

CVE-2016-0439 affects Oracle Fusion Middleware versions 11.1.1.7.0 and 11.1.1.9.0.

Can CVE-2016-0439 be exploited remotely?

Yes, CVE-2016-0439 allows remote attackers to exploit the vulnerability through its related SSL support issues.

Is there a workaround for CVE-2016-0439?

There are no official workarounds for CVE-2016-0439, so applying the security patch is the recommended solution.