Skip to main content

Applications Manager CVE-2016-3525

MEDIUM
2016-07-21 secalert_us@oracle.com
Information Disclosure Oracle Applications Manager
5.9
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 21, 2016 - 10:13 cve.org
MEDIUM 5.9

DescriptionCVE.org

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management.

AnalysisAI

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Technical ContextAI

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management. Affected products include: Oracle Applications Manager.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Applications Manager

View all
CVE-2012-1063 HIGH POC
7.5 Feb 14

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execu
CVE-2012-1062 MEDIUM POC
4.3 Feb 14

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attac
CVE-2017-10144 HIGH
7.5 Aug 08

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics

CVE-2018-3235 HIGH
8.2 Oct 17

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: None). Rated high s
CVE-2021-35566 HIGH
8.1 Oct 20

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Rated high
CVE-2018-2996 HIGH
7.5 Jul 18

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics

CVE-2021-35582 MEDIUM
6.5 Oct 20

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Rated med
CVE-2021-2275 MEDIUM
6.5 Apr 22

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Rated med
CVE-2020-14761 MEDIUM
6.5 Oct 21

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Inter
CVE-2019-2825 MEDIUM
6.5 Jul 23

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics

CVE-2021-35580 MEDIUM
6.1 Oct 20

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Rated med
CVE-2020-14826 MEDIUM
5.3 Oct 21

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions). Rated m

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2016-3525 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy