CVE-2016-3545: Medium severity oracle application object library vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.

Affected Software

4 affected components

Oracle Application Object Library=12.1.3

Oracle Application Object Library=12.2.3

Oracle Application Object Library=12.2.4

Oracle Application Object Library=12.2.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3545?

CVE-2016-3545 has a medium severity rating due to its potential impact on confidentiality.

How do I fix CVE-2016-3545?

To fix CVE-2016-3545, apply the latest security patches provided by Oracle for the affected versions of the Application Object Library.

Who is affected by CVE-2016-3545?

Organizations using Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5 are affected by CVE-2016-3545.

What are the attack vectors for CVE-2016-3545?

CVE-2016-3545 can be exploited through web-based help screens, allowing remote attackers to access confidential information.

Is there a workaround for CVE-2016-3545?

There are no known workarounds for CVE-2016-3545, and applying the appropriate patches is recommended.