CVE-2016-3494: Medium severity oracle enterprise manager ops center vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning.

Affected Software

3 affected components

Oracle Enterprise Manager Ops Center=12.1.4

Oracle Enterprise Manager Ops Center=12.2.2

Oracle Enterprise Manager Ops Center=12.3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3494?

CVE-2016-3494 is classified as a moderate severity vulnerability that can impact the availability of the affected Oracle Enterprise Manager Ops Center versions.

How do I fix CVE-2016-3494?

To fix CVE-2016-3494, it is recommended to apply the latest patches provided by Oracle for the affected versions of Enterprise Manager Ops Center.

Which versions are affected by CVE-2016-3494?

CVE-2016-3494 affects Oracle Enterprise Manager Ops Center versions 12.1.4, 12.2.2, and 12.3.2.

What types of attacks can exploit CVE-2016-3494?

CVE-2016-3494 can be exploited by remote attackers to affect the availability of the system, particularly through OS Provisioning related vectors.

Is there a workaround for CVE-2016-3494?

Currently, there are no known workarounds for CVE-2016-3494 other than applying the recommended patches from Oracle.