CVE-2016-3524: Medium severity oracle e-business suite vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.

Affected Software

4 affected components

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Oracle E-Business Suite=12.2.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3524?

CVE-2016-3524 has been assigned a medium severity level, indicating potential impact on confidentiality and integrity.

How do I fix CVE-2016-3524?

To fix CVE-2016-3524, apply the latest patches provided by Oracle for the affected versions of Oracle E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2016-3524?

CVE-2016-3524 affects Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5.

What impact does CVE-2016-3524 have on systems?

CVE-2016-3524 can allow remote attackers to compromise the confidentiality and integrity of affected systems.

Is CVE-2016-3524 exploitable remotely?

Yes, CVE-2016-3524 can be exploited remotely, which increases its risk to vulnerable systems.