CVE-2016-3434: Medium severity oracle application object library vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout.

Affected Software

4 affected components

Oracle Application Object Library=12.1.3

Oracle Application Object Library=12.2.3

Oracle Application Object Library=12.2.4

Oracle Application Object Library=12.2.5

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3434?

CVE-2016-3434 is considered a high severity vulnerability as it allows remote attackers to affect the integrity of the system.

How do I fix CVE-2016-3434?

To fix CVE-2016-3434, apply the latest security patches provided by Oracle for the affected versions of the Application Object Library.

What versions of Oracle E-Business Suite are affected by CVE-2016-3434?

CVE-2016-3434 affects Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5.

What type of vulnerability is CVE-2016-3434?

CVE-2016-3434 is an unspecified integrity vulnerability related to the Logout functionality in the Oracle Application Object Library.

Can CVE-2016-3434 be exploited remotely?

Yes, CVE-2016-3434 can be exploited remotely by attackers to compromise the integrity of the affected systems.