CVE-2016-0700: Medium severity oracle weblogic server vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.

Affected Software

3 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.2.0.0

ORACLE WebLogic Server=12.1.3.0.0

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0700?

CVE-2016-0700 is classified as a high severity vulnerability due to its potential impact on confidentiality and integrity.

How do I fix CVE-2016-0700?

Patching the affected Oracle WebLogic Server versions to the latest updates provided by Oracle is the recommended way to fix CVE-2016-0700.

What versions of Oracle WebLogic Server are affected by CVE-2016-0700?

CVE-2016-0700 affects Oracle WebLogic Server versions 10.3.6, 12.1.2, and 12.1.3.

What components are impacted by CVE-2016-0700?

CVE-2016-0700 impacts the Console component of the Oracle WebLogic Server.

Can CVE-2016-0700 be exploited remotely?

Yes, CVE-2016-0700 can be exploited by remote attackers, making it critical to apply mitigations.