CVE

Id
90353  
CVE No.
CVE-2016-3534  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves an open redirect vulnerability, which allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.  
Phase
Assigned (20160317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
780076 90353 CVE-2016-3534 MISC:https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016  View
780077 90353 CVE-2016-3534 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
780078 90353 CVE-2016-3534 BID:91787  View
780079 90353 CVE-2016-3534 URL:http://www.securityfocus.com/bid/91787  View
780080 90353 CVE-2016-3534 BID:91907  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3413 JVNDB-2016-004186 Nexus 9 デバイス上で稼働する Android の NVIDIA メディアドライバにおける権限を取得される脆弱性 Nexus 9 デバイス上で稼働する Android の NVIDIA メディアドライバには、権限を取得される脆弱性が存在します。 CVE-2016-3847 90353 6.9 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004186.html  View