CVE-2016-3527: oracle demand planning – CVSS 9.1 · Watchpost