CVE-2016-5602: Infoleak

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.

Affected Software

5 affected components

ORACLE Data Integrator=11.1.1.7.0

ORACLE Data Integrator=11.1.1.9.0

ORACLE Data Integrator=12.1.3.0.0

ORACLE Data Integrator=12.2.1.0.0

ORACLE Data Integrator=12.2.1.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5602?

CVE-2016-5602 has a severity rating that indicates a potential impact on confidentiality due to its nature.

How do I fix CVE-2016-5602?

To fix CVE-2016-5602, you should apply the latest security updates and patches provided by Oracle for the affected versions of Oracle Data Integrator.

Who is affected by CVE-2016-5602?

CVE-2016-5602 affects remote authenticated users of specific versions of Oracle Data Integrator in Oracle Fusion Middleware.

What impact does CVE-2016-5602 have?

CVE-2016-5602 can affect the confidentiality of data processed by the Oracle Data Integrator component.

When was CVE-2016-5602 reported?

CVE-2016-5602 was reported in October 2016 as part of Oracle's Critical Patch Update.