CVE-2016-3533

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.5

Description The issue affects the integrity of the system via vectors related to Search in the Oracle Knowledge Management component. It is claimed by third parties to involve multiple open redirect vulnerabilities, which could allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For Oracle E-Business Suite versions 12.1.1 through 12.1.3, apply the July 2016 CPU patch to resolve the issue. For Oracle E-Business Suite versions 12.2.3 through 12.2.5, apply the July 2016 CPU patch to resolve the issue. As a temporary workaround, consider restricting access to the Search function in the Oracle Knowledge Management component until a patch is applied.