PT-2016-5535 · Oracle · Oracle Enterprise Communications Broker

Publicado 2016-07-21 · Atualizado 2017-09-01 · CVE-2016-3516

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions prior to 2.0.0m4p1

Description The issue affects confidentiality and can be exploited by remote authenticated users through vectors related to the GUI.

Recommendations For versions prior to 2.0.0m4p1, update to version 2.0.0m4p1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2016-3516

Produtos afetados

Oracle Enterprise Communications Broker

Referências · 7

• http://securitytracker.com/id/1036401 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3516 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3516 · Aviso do Fabricante
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Aviso do Fabricante
• http://securityfocus.com/bid/91787 · Nota
• http://synacktiv.com/ressources/oracle_sbc_verb_tampering.pdf · Nota
• http://securityfocus.com/bid/91858 · Nota