CVE-2016-0459: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.

Affected Software

5 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Oracle E-Business Suite=12.2.5

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0459?

The severity of CVE-2016-0459 is currently not specified but it affects the integrity of Oracle E-Business Suite.

How do I fix CVE-2016-0459?

To fix CVE-2016-0459, users should apply the latest security patches provided by Oracle for their specific version of Oracle E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2016-0459?

CVE-2016-0459 affects Oracle E-Business Suite versions 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5.

Who can exploit CVE-2016-0459?

CVE-2016-0459 can be exploited by remote authenticated users.

What type of vulnerability is CVE-2016-0459?

CVE-2016-0459 is an unspecified vulnerability associated with the integrity affected by unknown vectors related to Popup Windows.