Skip to main content

Applications Framework CVE-2016-3447

MEDIUM
2016-04-21 secalert_us@oracle.com
Information Disclosure Oracle Applications Framework
6.9
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.9 MEDIUM
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 21, 2016 - 11:00 cve.org
MEDIUM 6.9

DescriptionCVE.org

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.

AnalysisAI

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core. Affected products include: Oracle Applications Framework.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Applications Framework

View all
CVE-2017-3528 MEDIUM POC
5.4 Apr 24

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li
CVE-2026-62546 CRITICAL
9.1 Jul 21

Full takeover of the Oracle Applications Framework (Web Utilities component) is possible in Oracle E-Business Suite 12.2
CVE-2021-2200 CRITICAL
9.1 Apr 22

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). Rated crit
CVE-2026-60676 HIGH
8.8 Jul 21

Account takeover in Oracle Applications Framework (Search Bean component) affects Oracle E-Business Suite versions 12.2.
CVE-2026-60675 HIGH
8.8 Jul 21

Account or application takeover of Oracle Applications Framework - the presentation-layer component of Oracle E-Business
CVE-2026-62534 HIGH
8.8 Jul 21

Privilege-abusing account takeover in Oracle Applications Framework (Web Utilities component) of Oracle E-Business Suite
CVE-2020-14534 HIGH
8.2 Jul 15

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Rated high se
CVE-2020-2890 HIGH
8.2 Apr 15

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Rated hi
CVE-2019-2682 HIGH
8.2 Apr 23

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / Fil
CVE-2018-3243 HIGH
8.2 Oct 17

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None). Rated high
CVE-2026-60768 HIGH
8.1 Jul 21

Data compromise in Oracle Applications Framework (12.2.3 through 12.2.15), a core component of Oracle E-Business Suite,

CVE-2021-2380 HIGH
7.6 Jul 21

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upl

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2016-3447 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy