CVE-2016-3484: Low severity oracle database vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and integrity via unknown vectors.

Affected Software

3 affected components

Oracle Database=11.2.0.4

Oracle Database=12.1.0.1

Oracle Database=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3484?

CVE-2016-3484 has a medium severity rating due to its potential impact on confidentiality and integrity.

How do I fix CVE-2016-3484?

To remediate CVE-2016-3484, apply the latest security patch provided by Oracle for affected versions of the Database Vault component.

What systems are affected by CVE-2016-3484?

CVE-2016-3484 affects Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2.

What type of vulnerability is CVE-2016-3484?

CVE-2016-3484 is an unspecified vulnerability that allows local users to compromise confidentiality and integrity.

Is CVE-2016-3484 actively exploited in the wild?

As of the last available information, there have been no confirmed reports of CVE-2016-3484 being actively exploited.