CVE-2016-8325: Critical severity Oracle One-to-One Fulfillment vulnerability
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 9.1 (Confidentiality and Integrity impacts).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8325?
CVE-2016-8325 is considered to be easily exploitable and is rated with a high severity due to its impact on Oracle One-to-One Fulfillment.
How do I fix CVE-2016-8325?
To remediate CVE-2016-8325, Oracle advises upgrading to the patched versions of Oracle One-to-One Fulfillment.
Which versions are affected by CVE-2016-8325?
CVE-2016-8325 affects unsupported versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 of Oracle One-to-One Fulfillment.
Can CVE-2016-8325 be exploited by unauthenticated users?
Yes, CVE-2016-8325 is an easily exploitable vulnerability that allows unauthenticated attackers to execute the exploit over the network.
What component of Oracle E-Business Suite does CVE-2016-8325 affect?
CVE-2016-8325 affects the Internal Operations subcomponent of the Oracle One-to-One Fulfillment component in Oracle E-Business Suite.