CVE-2016-3432: Medium severity oracle bi publisher vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.

Affected Software

2 affected components

Oracle Business Intelligence Publisher=11.1.1.7.0

Oracle Business Intelligence Publisher=11.1.1.9.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3432?

CVE-2016-3432 has been categorized with a severity rating that indicates it poses potential risks to confidentiality and integrity.

How do I fix CVE-2016-3432?

To remediate CVE-2016-3432, users should upgrade to the latest patched version of Oracle Business Intelligence Publisher.

Who is affected by CVE-2016-3432?

CVE-2016-3432 affects users of Oracle Business Intelligence Publisher versions 11.1.1.7.0 and 11.1.1.9.0.

What type of attacks does CVE-2016-3432 enable?

CVE-2016-3432 specifically allows remote authenticated users to potentially compromise system confidentiality and integrity.

When was CVE-2016-3432 disclosed?

CVE-2016-3432 was disclosed as part of Oracle's Critical Patch Update in July 2016.