CVE-2016-0675: Medium severity oracle weblogic server vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.

Affected Software

3 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.2.0.0

ORACLE WebLogic Server=12.1.3.0.0

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0675?

CVE-2016-0675 is considered to have a moderate severity level impacting the confidentiality and integrity of Oracle WebLogic Server.

What versions of Oracle WebLogic Server are affected by CVE-2016-0675?

CVE-2016-0675 affects Oracle WebLogic Server versions 10.3.6, 12.1.2, and 12.1.3.

How do I fix CVE-2016-0675?

To fix CVE-2016-0675, apply the latest security patches provided by Oracle for the affected versions of WebLogic Server.

What exploit vectors are associated with CVE-2016-0675?

CVE-2016-0675 can be exploited via vectors related to the Console component of Oracle WebLogic Server.

Can CVE-2016-0675 be exploited remotely?

Yes, CVE-2016-0675 allows remote attackers to exploit the vulnerability to affect system confidentiality and integrity.