CVE-2016-0697: Medium severity oracle application object library vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.

Affected Software

4 affected components

Oracle Application Object Library=12.1.3

Oracle Application Object Library=12.2.3

Oracle Application Object Library=12.2.4

Oracle Application Object Library=12.2.5

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0697?

CVE-2016-0697 has a high severity rating due to its potential impact on confidentiality and integrity.

How do I fix CVE-2016-0697?

To fix CVE-2016-0697, you should apply the latest security patches provided by Oracle for the affected versions of the Oracle Application Object Library.

Which versions are affected by CVE-2016-0697?

CVE-2016-0697 affects Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5.

What types of attacks can CVE-2016-0697 enable?

CVE-2016-0697 can potentially allow local users to exploit the vulnerability to compromise the confidentiality and integrity of the system.

Is there a workaround for CVE-2016-0697 before applying a patch?

Currently, there are no documented workarounds for CVE-2016-0697, so patching is the recommended course of action.