CVE-2016-3510: Critical severity oracle weblogic server vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.

Affected Software

3 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.3.0.0

ORACLE WebLogic Server=12.2.1.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3510?

CVE-2016-3510 is considered a critical vulnerability that affects the confidentiality, integrity, and availability of Oracle WebLogic Server.

How do I fix CVE-2016-3510?

To fix CVE-2016-3510, it is recommended to apply the latest security patches provided by Oracle for the affected WebLogic Server versions.

Which versions of Oracle WebLogic Server are affected by CVE-2016-3510?

CVE-2016-3510 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0.

What types of attacks can exploit CVE-2016-3510?

CVE-2016-3510 can be exploited by remote attackers to compromise the confidentiality, integrity, and availability of the server.

Is CVE-2016-3510 related to other vulnerabilities in WebLogic Server?

Yes, CVE-2016-3510 is a different vulnerability than CVE-2016-3586, although they both affect the same Oracle WebLogic Server component.