CVE-2016-3504 Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentialit...
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to ADF Faces.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdeveloper | = 11.1.1.7.0 | No fix listed |
| oracle jdeveloper | = 11.1.1.9.0 | No fix listed |
| oracle jdeveloper | = 11.1.2.4.0 | No fix listed |
| oracle jdeveloper | = 12.1.3.0.0 | No fix listed |
| oracle jdeveloper | = 12.2.1.0.0 | No fix listed |
References
- www.oracle.com patch vendor-advisory
- 91787 third-party-advisory vdb-entry
- 92023 vdb-entry
- 1036370 vdb-entry