CVE-2016-3586: Critical severity oracle weblogic server vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510.

Affected Software

3 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.3.0.0

ORACLE WebLogic Server=12.2.1.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3586?

CVE-2016-3586 is considered to have a high severity as it affects the confidentiality, integrity, and availability of the Oracle WebLogic Server.

How do I fix CVE-2016-3586?

To fix CVE-2016-3586, it is recommended to apply the latest patches provided by Oracle for the affected versions of WebLogic Server.

What versions of Oracle WebLogic Server are affected by CVE-2016-3586?

CVE-2016-3586 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0.

Can CVE-2016-3586 be exploited remotely?

Yes, CVE-2016-3586 allows remote attackers to exploit the vulnerability, which can lead to serious security implications.

What types of attacks can CVE-2016-3586 enable?

CVE-2016-3586 can enable attacks that impact the confidentiality, integrity, and availability of the affected WebLogic Server installations.