CVE-2016-3446: High severity oracle business intelligence enterprise edition vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.

Affected Software

2 affected components

ORACLE Business Intelligence=11.1.1.7.0

ORACLE Business Intelligence=11.1.1.9.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3446?

CVE-2016-3446 is classified as a critical vulnerability affecting Oracle Business Intelligence Enterprise Edition.

How do I fix CVE-2016-3446?

To fix CVE-2016-3446, apply the latest patches provided by Oracle for affected versions 11.1.1.7.0 and 11.1.1.9.0.

What components are affected by CVE-2016-3446?

CVE-2016-3446 affects the Oracle Business Intelligence Enterprise Edition component within Oracle Fusion Middleware.

Can CVE-2016-3446 be exploited remotely?

Yes, CVE-2016-3446 allows remote attackers to exploit the vulnerability, potentially affecting confidentiality, integrity, and availability.

What versions of Oracle Business Intelligence are vulnerable to CVE-2016-3446?

The vulnerable versions are Oracle Business Intelligence Enterprise Edition 11.1.1.7.0 and 11.1.1.9.0.