CVE-2016-3436
HighSummary
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
Risk Assessment
This vulnerability may lead to breaches of confidentiality and integrity of data within the organization, potentially resulting in serious legal and financial consequences.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and to monitor the system for unauthorized activities.
Other vulnerabilities in Oracle Common Applications Calendar
See all- CVE-2017-10326High
Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires human interaction from a person other than the attacker, which increases the risk of significant consequences for other products.
- CVE-2017-10325High
A vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications calendar. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2016-3543Critical
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
- CVE-2016-3541Critical
An unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite allows remote attackers to affect confidentiality and integrity via vectors related to Notes.
- CVE-2026-61294Medium
Vulnerability in Oracle Common Applications Calendar (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, delete access and cause partial denial of service.
Original NVD description (English source)
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.