CVE-2016-3491
HighSummary
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework.
Risk Assessment
This vulnerability may lead to breaches of confidentiality and integrity of data, posing a risk to the organization's information security.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and monitor the system for unauthorized activities.
Other vulnerabilities in Oracle CRM Technical Foundation
See all- CVE-2017-10185High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, increasing the risk for the organization.
- CVE-2017-10180High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-10143High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3420High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
- CVE-2017-3419High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle CRM Technical Foundation.
- CVE-2017-3418High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Attacks may lead to unauthorized access to critical data and complete access to all data accessible in Oracle CRM Technical Foundation.
- CVE-2016-5589High
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
- CVE-2016-3535High
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch.
Original NVD description (English source)
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue is a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.