CVE-2016-3545

4 documents4 sources

Severity

5.3MEDIUM

EPSS

0.4%

top 38.37%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Application Object Library

Timeline

PublishedJul 21

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDoracle/application_object_library4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-8grq-p3rh-q3cg: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12↗2022-05-17

▶

CVEList

CVE-2016-3545: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12↗2016-07-21

▶

📋Vendor Advisories

Red Hat

Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)↗2016-03-08

▶