PT-2016-5534 · Oracle · Oracle Enterprise Communications Broker

Published 2016-07-21 · Updated 2017-09-01 · CVE-2016-3515

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions prior to 2.0.0m4p1

Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors.

Recommendations For versions prior to 2.0.0m4p1, update to version 2.0.0m4p1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2016-3515

Affected Products

Oracle Enterprise Communications Broker

References · 7

• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3515 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3515 · Vendor Advisory
• http://securityfocus.com/bid/91854 · Note
• http://synacktiv.com/ressources/oracle_sbc_logfiles_leak.pdf · Note
• http://securityfocus.com/bid/91787 · Note
• http://securitytracker.com/id/1036401 · Note