PT-2016-5525

CVE-2016-3505

·

Published

2016-10-25

·

Updated

2018-10-30

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0
Description The issue affects confidentiality, integrity, and availability. It is related to JavaServer Faces and can be exploited by remote authenticated users.
Recommendations For version 10.3.6.0, update to a version that includes the fix for this issue. For version 12.1.3.0, update to a version that includes the fix for this issue. For version 12.2.1.0, update to a version that includes the fix for this issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2016-3505
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com