Unspecified Vulnerability in Oracle Database Server's Application Express Component
CVE-2016-3448

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Application Express
Vendor
CVE Published:
21 July 2016

What is CVE-2016-3448?

An unspecified vulnerability exists in the Application Express component of Oracle Database Server prior to version 5.0.4. This vulnerability enables remote attackers to potentially compromise the confidentiality and integrity of data through unknown vectors. It highlights the need for companies to remain vigilant about their database security and ensure their Oracle products are regularly updated to mitigate exposure to potential threats.

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1036363
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/91787
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2016-3448 : Unspecified Vulnerability in Oracle Database Server's Application Express Component