CVE-2016-3520

MEDIUM 4.9CVE-2016-3520 · Published 21/07/2016 · updated 17/06/2026

In short

CVE-2016-3520 is a MEDIUM (CVSS 4.9) vulnerability affecting e-business suite (oracle).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
e-business suite oracle	`= 12.1.3= 12.2.3= 12.2.4= 12.2.5`	No fix yet

Description

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality via vectors related to AOL Diagnostic tests.

References

oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
securityfocus.com/bid/91787 · Third Party Advisory
securityfocus.com/bid/91896
securitytracker.com/id/1036403

More vulnerabilities in e-business suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

e-business suite

oracle

= 12.1.3= 12.2.3= 12.2.4= 12.2.5

No fix yet

More vulnerabilities in e-business suite

See all →