CVE-2016-5601
medium
CVSS v3
6.3
CVSS v2
3.3
VIR risk
6.3
Description
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.
Predictions
Exploit likelihood
63%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| oracle | weblogic_server | 12.1.3.0.0 | |
| oracle | weblogic_server | 12.2.1.0.0 | |
| oracle | weblogic_server | 12.2.1.1.0 | |
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/93704
- http://www.securitytracker.com/id/1037052
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/93704
- http://www.securitytracker.com/id/1037052
CWEs
CWE-284
Verify integrity in audit chain (admin only). AS-IS.