PT-2016-6448 · Oracle · Oracle Communications Messaging Server

Published 2016-07-21 · Updated 2017-09-01 · CVE-2016-5455

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Communications Messaging Server versions 6.3 through 8.0

Description The issue affects confidentiality and can be exploited remotely. It is related to the Multiplexor component in Oracle Communications Applications.

Recommendations For versions 6.3 through 8.0, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2016-5455

Affected Products

Oracle Communications Messaging Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-5455 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5455 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• http://securityfocus.com/bid/91863 · Note
• http://securityfocus.com/bid/91787 · Note
• http://securitytracker.com/id/1036401 · Note