Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-3542

CWE-121 — Stack-based Buffer Overflow6 documents6 sources
Severity
6.5MEDIUM
EPSS
28.3%
top 3.49%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Oracle Knowledge Management
Timeline
PublishedJul 21
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NExploitability: 1.2 | Impact: 5.2

Affected Packages1 packages

▶NVDoracle/knowledge_management6 versions+5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gwcp-56qr-72w7: Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12↗2022-05-17
▶
CVEList
CVE-2016-3542: Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12↗2016-07-21
▶

💥Exploits & PoCs

1
Exploit-DB
Oracle Knowledge Management 12.1.1 < 12.2.5 - XML External Entity Leading To Remote Code Execution↗2017-03-17
▶

📋Vendor Advisories

1
Red Hat
pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)↗2016-02-09
▶

💬Community

1
Bugzilla
CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)↗2016-02-24
▶