CVE-2016-3504: Critical severity oracle jdeveloper vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to ADF Faces.

Affected Software

5 affected components

Oracle JDeveloper=11.1.1.7.0

Oracle JDeveloper=11.1.1.9.0

Oracle JDeveloper=11.1.2.4.0

Oracle JDeveloper=12.1.3.0.0

Oracle JDeveloper=12.2.1.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3504?

CVE-2016-3504 has been categorized as having a high severity level due to its potential to impact confidentiality, integrity, and availability.

How do I fix CVE-2016-3504?

To fix CVE-2016-3504, users should upgrade to the latest patched version of Oracle JDeveloper provided by Oracle.

Which versions of Oracle JDeveloper are affected by CVE-2016-3504?

CVE-2016-3504 affects Oracle JDeveloper versions 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0.

What type of attacks does CVE-2016-3504 allow?

CVE-2016-3504 allows remote attackers to conduct attacks that may compromise the confidentiality, integrity, and availability of affected systems.

What component of Oracle is impacted by CVE-2016-3504?

CVE-2016-3504 impacts the Oracle JDeveloper component within Oracle Fusion Middleware.