CVE-2016-0528: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0529, and CVE-2016-0530.

Affected Software

6 affected components

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Oracle E-Business Suite=12.2.5

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0528?

CVE-2016-0528 has a critical severity level impacting confidentiality and integrity.

Which Oracle E-Business Suite versions are affected by CVE-2016-0528?

CVE-2016-0528 affects Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5.

How do I fix CVE-2016-0528?

To address CVE-2016-0528, apply the latest security patches released by Oracle for your affected E-Business Suite version.

What type of attacks can exploit CVE-2016-0528?

CVE-2016-0528 can be exploited by remote attackers targeting User GUI components.

Does CVE-2016-0528 have any known workarounds?

There are no publicly documented workarounds for CVE-2016-0528, so applying patches is recommended.