CVE-2016-3445: Medium severity oracle weblogic server vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.

Affected Software

2 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3445?

CVE-2016-3445 has been classified with a severity rating that indicates it can impact the availability of the affected systems.

How do I fix CVE-2016-3445?

To mitigate CVE-2016-3445, it is recommended to apply the latest security patches provided by Oracle for WebLogic Server 10.3.6.0 and 12.1.3.0.

Which versions of Oracle WebLogic Server are affected by CVE-2016-3445?

CVE-2016-3445 affects Oracle WebLogic Server versions 10.3.6.0 and 12.1.3.0.

Can CVE-2016-3445 be exploited remotely?

Yes, CVE-2016-3445 allows remote attackers to exploit the vulnerability and potentially affect the availability of the server.

Is CVE-2016-3445 related to any other vulnerabilities?

CVE-2016-3445 is a different vulnerability than CVE-2016-5488, although both affect the Oracle WebLogic Server.