CVE-2016-5618: Infoleak

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.

Affected Software

6 affected components

ORACLE Data Integrator=11.1.1.7.0

ORACLE Data Integrator=11.1.1.9.0

ORACLE Data Integrator=12.1.2.0.0

ORACLE Data Integrator=12.1.3.0.0

ORACLE Data Integrator=12.2.1.0.0

ORACLE Data Integrator=12.2.1.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5618?

CVE-2016-5618 has a CVSS score that indicates it poses a significant risk to the confidentiality of Oracle Data Integrator components.

How do I fix CVE-2016-5618?

To remediate CVE-2016-5618, update your Oracle Data Integrator to the latest patched version provided by Oracle.

Who is affected by CVE-2016-5618?

CVE-2016-5618 affects remote authenticated users of various versions of Oracle Data Integrator in Oracle Fusion Middleware.

What are the affected versions in CVE-2016-5618?

The affected versions include Oracle Data Integrator 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0.

What impact does CVE-2016-5618 have?

CVE-2016-5618 potentially affects the confidentiality of data processed by the Code Generation Engine in Oracle Data Integrator.