CVE-2016-0457 — Oracle E-business Suite vulnerability

4 documents4 sources

Severity

5.0MEDIUMNVD

EPSS

0.6%

top 31.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle E-business Suite

Timeline

PublishedJan 21

Latest updateMay 14

Description

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a deni…

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/e-business_suite12.1, 12.2+1

🔴Vulnerability Details

GHSA

GHSA-hx29-457g-g6vv: Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12↗2022-05-14

▶

CVEList

CVE-2016-0457: Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12↗2016-01-21

▶

VulnCheck

Oracle E-Business Suite Application Mgmt Pack for E-Business Suite Vulnerability↗2016

▶