CVE-2016-3533

MEDIUM 4.7CVE-2016-3533 · Published 21/07/2016 · updated 17/06/2026

In short

CVE-2016-3533 is a MEDIUM (CVSS 4.7) vulnerability affecting knowledge management (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
knowledge management oracle	`= 12.1.1= 12.1.2= 12.1.3= 12.2.3= 12.2.4= 12.2.5`	No fix yet

Description

Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Search. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple open redirect vulnerabilities, which allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

References

oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
securityfocus.com/bid/91787 · Third Party Advisory
securityfocus.com/bid/91909
securitytracker.com/id/1036403
onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016 · Third Party Advisory

More vulnerabilities in knowledge management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

knowledge management

oracle

= 12.1.1= 12.1.2= 12.1.3= 12.2.3= 12.2.4= 12.2.5

No fix yet

Description

More vulnerabilities in knowledge management

See all →