CVE-2016-5571

Low

Low Medium High Critical

CVSS Score

Published: Oct 25, 2016

Last Modified: Apr 12, 2025

Vulnerability Description

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 and 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities, a different vulnerability than CVE-2016-5567.

Known Affected Software

5 configuration(s) from 1 vendor(s)

applications_dba

Version:

12.1.3

CPE:

cpe:2.3:a:oracle:applications_dba:12.1.3:*:*:*:*:*:*:*

applications_dba

Version:

12.2.6

CPE:

cpe:2.3:a:oracle:applications_dba:12.2.6:*:*:*:*:*:*:*

applications_dba

Version:

12.2.4

CPE:

cpe:2.3:a:oracle:applications_dba:12.2.4:*:*:*:*:*:*:*

applications_dba

Version:

12.2.5

CPE:

cpe:2.3:a:oracle:applications_dba:12.2.5:*:*:*:*:*:*:*

applications_dba

Version:

12.2.3

CPE:

cpe:2.3:a:oracle:applications_dba:12.2.3:*:*:*:*:*:*:*

This vulnerability affects 5 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-284

Improper Access Control

Description: The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Typical Severity: Medium
Abstraction Level: Pillar