CVE-2016-5535: Critical severity oracle weblogic server vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

4 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.3.0.0

ORACLE WebLogic Server=12.2.1.0.0

ORACLE WebLogic Server=12.2.1.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5535?

CVE-2016-5535 is classified as a vulnerability that can impact confidentiality, integrity, and availability.

How do I fix CVE-2016-5535?

To mitigate CVE-2016-5535, it is recommended to apply the latest security patch provided by Oracle for the affected WebLogic Server versions.

What systems are affected by CVE-2016-5535?

CVE-2016-5535 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1.

Can CVE-2016-5535 be exploited remotely?

Yes, CVE-2016-5535 allows remote attackers to exploit the vulnerability through unknown vectors.

Is there any public exploit available for CVE-2016-5535?

There are currently no specific public exploits reported for CVE-2016-5535, but its nature suggests that it could be vulnerable to remote attacks.