medium6.5Public exploit code
CVE-2016-3542
Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Knowledge Management 12.1.1 < 12.2.5 - XML External Entity Leading To Remote Code Execution2017-03-17 · webapps · multiple
Impact
Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Knowledge Management | Versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 |
References
- NVD record
- CVE.org record
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.securityfocus.com/bid/91787
- http://www.securityfocus.com/bid/91873
- http://www.securitytracker.com/id/1036403
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.securityfocus.com/bid/91787
- http://www.securityfocus.com/bid/91873
- http://www.securitytracker.com/id/1036403