PT-2016-6517

CVE-2016-5532

·

Published

2016-10-25

·

Updated

2017-07-29

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.6
Description The issue affects confidentiality and can be exploited remotely. It is related to vectors involving Workflow Events in the Oracle Shipping Execution component.
Recommendations For Oracle E-Business Suite versions 12.1.1 through 12.1.3, update to a version outside of this range to resolve the issue. For Oracle E-Business Suite versions 12.2.3 through 12.2.6, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to Workflow Events in the Oracle Shipping Execution component until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾