CVE-2016-3473: Infoleak
Published Oct 25, 2016
·Updated
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
Affected Software
3 affected components
Oracle Business Intelligence Publisher=11.1.1.7.0
Oracle Business Intelligence Publisher=11.1.1.9.0
Oracle Business Intelligence Publisher=12.2.1.0.0
Remediation
Event History
Oct 25, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3473?
CVE-2016-3473 carries a medium severity rating due to its potential impact on confidentiality.
2
Who is affected by CVE-2016-3473?
CVE-2016-3473 affects users of Oracle Business Intelligence Publisher versions 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0.
3
How do I fix CVE-2016-3473?
To fix CVE-2016-3473, upgrade to a patched version of Oracle Business Intelligence Publisher as recommended by Oracle.
4
What type of vulnerability is CVE-2016-3473?
CVE-2016-3473 is an unspecified vulnerability that allows remote authenticated users to affect confidentiality.
5
Is CVE-2016-3473 exploitable remotely?
Yes, CVE-2016-3473 can be exploited by remote authenticated users.