Vulnerability in Oracle E-Business Suite Calendar Component
CVE-2016-3436

8.2HIGH

Key Information:

Vendor

Oracle
Status
Common Applications Calendar
Vendor
CVE Published:
21 April 2016

What is CVE-2016-3436?

An unspecified vulnerability exists within the Oracle Common Applications Calendar component of Oracle E-Business Suite. This weakness allows remote attackers to compromise data confidentiality and integrity through specific vectors associated with task management. Given the critical role of the E-Business Suite in enterprise operations, addressing this vulnerability is essential to protect sensitive information and maintain system integrity.

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_CONFIRM
https://www.onapsis.com/research/security-advisories/orac...
x_refsource_MISC
http://www.securitytracker.com/id/1035603
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2016-3436 : Vulnerability in Oracle E-Business Suite Calendar Component