CVE-2016-0671

low
Published 2016-04-21 · Modified 2026-05-06
CVSS v3
3.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2
2.6
VIR risk
3.7

Description

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.

Predictions

Exploit likelihood
47%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Application impact

VendorProductVersionsFixed
oraclehttp_server12.1.2.0

References

Verify integrity in audit chain (admin only). AS-IS.