CVE-2016-3532
HighSummary
Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via SDK client integration.
Risk Assessment
Attackers may exploit this vulnerability to inject arbitrary web scripts or HTML, potentially leading to serious security breaches.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and monitor the system for suspicious activity.
Other vulnerabilities in Oracle Advanced Inbound Telephony
See all- CVE-2026-70725High
Vulnerability in Oracle Advanced Inbound Telephony (component: Internal Operations) affects versions 12.2.3-12.2.15. A low-privileged attacker can gain full data access, modify some data, and cause partial denial of service over HTTP.
- CVE-2026-70722High
Vulnerability in Oracle Advanced Inbound Telephony (component: Internal Operations) affects versions 12.2.3-12.2.15. An unauthenticated attacker can modify data and cause partial denial of service over HTTPS.
- CVE-2026-61256Medium
Vulnerability in the Servers component of Oracle Advanced Inbound Telephony (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read) and cause partial DoS.
- CVE-2026-60491Medium
Vulnerability in Oracle Advanced Inbound Telephony (component: SDK client integration) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Original NVD description (English source)
Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.