PT-2016-5533 · Oracle · Oracle Enterprise Communications Broker

Published 2016-07-21 · Updated 2017-09-01 · CVE-2016-3514

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions prior to 2.0.0m4p1

Description The issue affects confidentiality and can be exploited by remote authenticated users through vectors related to the GUI.

Recommendations For versions prior to 2.0.0m4p1, update to version 2.0.0m4p1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2016-3514

Affected Products

Oracle Enterprise Communications Broker

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-3514 · Security Note
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3514 · Vendor Advisory
• http://synacktiv.com/ressources/oracle_sbc_configuration_issues.pdf · Note
• http://securityfocus.com/bid/91787 · Note
• http://securitytracker.com/id/1036401 · Note