CVE-2016-3489: High severity oracle database vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

3 affected components

Oracle Database=11.2.0.4

Oracle Database=12.1.0.1

Oracle Database=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3489?

CVE-2016-3489 has been classified as having a moderate severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-3489?

To remediate CVE-2016-3489, it is recommended to apply the latest patches or updates provided by Oracle for affected versions.

Which versions of Oracle Database are affected by CVE-2016-3489?

CVE-2016-3489 affects Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2.

What type of users can exploit CVE-2016-3489?

Local users may exploit CVE-2016-3489 to affect the security attributes of the Oracle Database.

What does CVE-2016-3489 affect within Oracle Database?

CVE-2016-3489 impacts the Data Pump Import component, which could compromise data confidentiality and integrity.