CVE-2016-0472: Medium severity oracle database vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality and availability via unknown vectors.

Affected Software

3 affected components

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0472?

CVE-2016-0472 has not been assigned a CVSS score, but it allows remote authenticated users to affect the confidentiality and availability of the Oracle Database.

How do I fix CVE-2016-0472?

To mitigate CVE-2016-0472, it is recommended to apply the latest security updates or patches provided by Oracle for affected database versions.

Which versions of Oracle Database are affected by CVE-2016-0472?

CVE-2016-0472 affects Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2.

Can CVE-2016-0472 be exploited by unauthenticated users?

No, CVE-2016-0472 requires that the attacker is a remote authenticated user to exploit the vulnerability.

What components of Oracle Database are impacted by CVE-2016-0472?

CVE-2016-0472 specifically affects the XML Database (XDB) component of Oracle Database.