CVE-2016-3540
First published: Thu Jul 21 2016(Updated: )
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Enterprise Manager Base Platform | =12.1.0.5 | |
| Oracle Enterprise Manager Base Platform | =13.1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-3540?
CVE-2016-3540 has a medium severity level due to its potential impact on confidentiality.
How do I fix CVE-2016-3540?
To address CVE-2016-3540, upgrade to the latest version of Oracle Enterprise Manager Base Platform as recommended by Oracle.
What components are affected by CVE-2016-3540?
CVE-2016-3540 affects the Enterprise Manager Base Platform component within Oracle Enterprise Manager Grid Control versions 12.1.0.5 and 13.1.0.0.
Can CVE-2016-3540 be exploited remotely?
Yes, CVE-2016-3540 can be exploited remotely by attackers aiming to compromise the confidentiality of the affected systems.
What should I do if I am using an affected version of Oracle Enterprise Manager?
If you are using an affected version of Oracle Enterprise Manager, you should promptly apply the recommended patches and upgrades from Oracle.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- agent/remedy
- agent/severity
- agent/author
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle enterprise manager base platform
- version/oracle enterprise manager base platform/12.1.0.5
- version/oracle enterprise manager base platform/13.1.0.0