CVE-2016-2346

Name of the Vulnerable Software and Affected Versions Allround Automations PL/SQL Developer version 11.0.6 and earlier, specifically versions prior to 11.0.6

Description The issue allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream, as the software relies on unverified HTTP data for updates.

Recommendations For versions prior to 11.0.6, update to version 11.0.6 or later to resolve the issue.