CVE-2016-3456: High severity oracle complex maintenance, repair, and overhaul vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Dialog Box.

Affected Software

3 affected components

Oracle Complex Maintenance Repair And Overhaul=12.1.1

Oracle Complex Maintenance Repair And Overhaul=12.1.2

Oracle Complex Maintenance Repair And Overhaul=12.1.3

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3456?

CVE-2016-3456 is classified as a critical vulnerability due to its potential impact on confidentiality and integrity.

How can I fix CVE-2016-3456?

To remediate CVE-2016-3456, apply the latest patches provided by Oracle for affected versions of the Complex Maintenance, Repair, and Overhaul component.

Who is affected by CVE-2016-3456?

CVE-2016-3456 affects users of Oracle Complex Maintenance, Repair, and Overhaul versions 12.1.1, 12.1.2, and 12.1.3.

What type of attacks does CVE-2016-3456 allow?

CVE-2016-3456 allows remote attackers to compromise system confidentiality and integrity through unspecified vectors.

When was CVE-2016-3456 disclosed?

CVE-2016-3456 was disclosed in April 2016 as part of Oracle's Critical Patch Update.