Vulnerability Description
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to ADF Faces.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Jdeveloper | 11.1.1.7.0 |
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/91787Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/92023
- http://www.securitytracker.com/id/1036370
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/91787Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/92023
- http://www.securitytracker.com/id/1036370
FAQ
What is CVE-2016-3504?
CVE-2016-3504 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentialit...
How severe is CVE-2016-3504?
CVE-2016-3504 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-3504?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Jdeveloper.