PT-2016-5524 · Oracle · Oracle Jdeveloper

Published 2016-07-21 · Updated 2017-09-01 · CVE-2016-3504

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.1.7.0 through 11.1.1.9.0 Oracle JDeveloper versions 11.1.2.4.0 Oracle JDeveloper versions 12.1.3.0.0 Oracle JDeveloper versions 12.2.1.0.0

Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning ADF Faces in Oracle JDeveloper.

Recommendations For Oracle JDeveloper version 11.1.1.7.0, update to a version that is not affected by this issue. For Oracle JDeveloper version 11.1.1.9.0, update to a version that is not affected by this issue. For Oracle JDeveloper version 11.1.2.4.0, update to a version that is not affected by this issue. For Oracle JDeveloper version 12.1.3.0.0, update to a version that is not affected by this issue. For Oracle JDeveloper version 12.2.1.0.0, update to a version that is not affected by this issue.

Fix

Related Identifiers

CVE-2016-3504

Affected Products

Oracle Jdeveloper

References · 6

• https://osv.dev/vulnerability/CVE-2016-3504 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3504 · Security Note
• http://securitytracker.com/id/1036370 · Note
• http://securityfocus.com/bid/92023 · Note
• http://securityfocus.com/bid/91787 · Note