CVE-2016-3536
HighSummary
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables.
Risk Assessment
This vulnerability may lead to breaches of confidentiality and integrity of data within the organization, potentially resulting in serious legal and financial consequences.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and monitor the system for suspicious activities.
Other vulnerabilities in Oracle Marketing
See all- CVE-2017-10171High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3356High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, increasing the risk of unauthorized access to critical data.
- CVE-2017-3355High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, which can lead to unauthorized access to critical data.
- CVE-2017-3347High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires interaction from a person other than the attacker.
- CVE-2017-3345High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized creation, deletion, or modification of data.
- CVE-2017-3342High
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker.
- CVE-2017-3337High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2017-3358High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction and may significantly impact additional products.
- CVE-2017-3357High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker.
- CVE-2017-3354High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
Original NVD description (English source)
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.