CVE-2016-5589
HighSummary
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
Risk Assessment
This vulnerability may lead to breaches of data confidentiality and integrity within the system, posing a serious threat to the organization.
Recommendation
It is recommended to upgrade to the latest version of Oracle E-Business Suite to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle CRM Technical Foundation
See all- CVE-2017-10185High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, increasing the risk for the organization.
- CVE-2017-10180High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-10143High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3420High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
- CVE-2017-3419High
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle CRM Technical Foundation.
- CVE-2017-3418High
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Attacks may lead to unauthorized access to critical data and complete access to all data accessible in Oracle CRM Technical Foundation.
- CVE-2016-3535High
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch.
- CVE-2016-3491High
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework.
Original NVD description (English source)
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.