Oracle Critical Patch Update Advisory - July 2016 - Oracle CVRF Oracle Critical Patch Update Advisory CPUJul2016 Final 1.0 1.0 2016-07-19T13:00:00-07:00 Initial Distribution 2016-07-19T13:00:00-07:00 2016-07-19T13:00:00-07:00 This document contains descriptions of Oracle product security vulnerabilities which have had fixes released for all supported versions and platforms for the associated product. Additional information regarding these vulnerabilities including fix distribution information can be found at the Oracle sites referenced in this document. This document is published at: http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3089849.xml https://www.oracle.com/security-alerts/cpujul2016.html URL to html version of Advisory Adam Willard Raytheon Foreground Security Alexander Kornbrust Red Database Security Alexander Mirosh Hewlett Packard Enterprise Alexey Tyurin ERPScan Alvaro Munoz Hewlett Packard Enterprise Alvaro Munoz Trend Micro's Zero Day Initiative Ben Lincoln NCC Group Brian Martin Tenable Network Security Bruno Cirone Bruno Cirone Cameron Dawe Spam404.com Christian Schneider Trend Micro's Zero Day Initiative David Litchfield Google Devin Rosenbauer Identity Works LLC Jack Fei FINRA Juan Manuel Fernández Torres Telefonica.com Jubaer Al Nazi Jubaer Al Nazi Karim Rahal Karim Rahal Kasper Andersen Kasper Andersen Latish Danawale Pristine Infosolutions Martin Petran Accenture Matias Mevied Onapsis Matthias Kaiser Code White Matthias-Christian Ott Matthias-Christian Ott Nicholas Lemonias Advanced Information Security Corporation Nicolas Collignon synacktiv Othmane Tamagart Othmane Tamagart Paul M. Wright oraclesecurity.com Quan Nguyen Google Ramal Hajataliyev Ramal Hajataliyev Regina Wilson Cisco Reno Robert Reno Robert Rodolfo Godalle Jr. Rodolfo Godalle Jr. Shawar Khan Shawar Khan Spyridon Chatzimichail COSMOTE - Mobile Telecommunications S.A. Stephan Borosh Veris Group, LLC Stephen Kost Integrigy Steven Seeley Beyond Security Sven Blumenstein Google Tayyab Qadir Tayyab Qadir Teemu Kääriäinen Teemu Kääriäinen Ubais PK Ubais PK Vikas Khanna Vikas Khanna Winnye Jakeson Winnye Jakeson XOR19 Trend Micro's Zero Day Initiative Communications ASAP Version 7.0 Communications ASAP Version 7.2 Communications ASAP Version 7.3 Communications Network Charging and Control Version 4.4.1.5.0 Communications Network Charging and Control Version 5.0.0.1.0 Communications Network Charging and Control Version 5.0.0.2.0 Communications Network Charging and Control Version 5.0.1.0.0 Communications Network Charging and Control Version 5.0.2.0.0 Communications Messaging Server Version 6.3 Communications Messaging Server Version 7.0 Communications Messaging Server Version 8.0 Communications Messaging Server Version Prior to 7.0.5.37.0 and 8.0.1.1.0 Communications Session Border Controller Version 7.2.0 Communications Session Border Controller Version 7.3.0 Communications Unified Session Manager Version 7.2.5 Communications Unified Session Manager Version 7.3.5 Communications Core Session Manager Version 7.2.5 Communications Core Session Manager Version 7.3.5 Enterprise Communications Broker Version Prior to PCz 2.0.0m4p1 Communications Operations Monitor Version Prior to 3.3.92.0.0 Communications Policy Management Version Prior to 9.9.2 Communications EAGLE Application Processor Version 16.0 Oracle Database Version 11.2.0.4 Oracle Database Version 12.1.0.1 Oracle Database Version 12.1.0.2 JDBC Version 11.2.0.4 JDBC Version 12.1.0.1 JDBC Version 12.1.0.2 Application Express Version Prior to 5.0.4 Applications Manager Version 12.1.3 Marketing Version 12.1.1 Marketing Version 12.1.2 Marketing Version 12.1.3 Marketing Version 12.2.3 Marketing Version 12.2.4 Marketing Version 12.2.5 Advanced Inbound Telephony Version 12.1.1 Advanced Inbound Telephony Version 12.1.2 Advanced Inbound Telephony Version 12.1.3 Internet Expenses Version 12.1.1 Internet Expenses Version 12.1.2 Internet Expenses Version 12.1.3 Internet Expenses Version 12.2.3 Internet Expenses Version 12.2.4 Internet Expenses Version 12.2.5 Application Object Library Version 12.1.3 Application Object Library Version 12.2.3 Application Object Library Version 12.2.4 Application Object Library Version 12.2.5 Advanced Collections Version 12.1.1 Advanced Collections Version 12.1.2 Advanced Collections Version 12.1.3 Email Center Version 12.1.1 Email Center Version 12.1.2 Email Center Version 12.1.3 Email Center Version 12.2.3 Email Center Version 12.2.4 Email Center Version 12.2.5 Installed Base Version 12.1.1 Installed Base Version 12.1.2 Installed Base Version 12.1.3 Installed Base Version 12.2.3 Installed Base Version 12.2.4 Installed Base Version 12.2.5 Web Applications Desktop Integrator Version 12.1.3 Web Applications Desktop Integrator Version 12.2.3 Web Applications Desktop Integrator Version 12.2.4 Web Applications Desktop Integrator Version 12.2.5 CRM Technical Foundation Version 12.1.3 Knowledge Management Version 12.1.1 Knowledge Management Version 12.1.2 Knowledge Management Version 12.1.3 Knowledge Management Version 12.2.3 Knowledge Management Version 12.2.4 Knowledge Management Version 12.2.5 Customer Interaction History Version 12.1.1 Customer Interaction History Version 12.1.2 Customer Interaction History Version 12.1.3 One-to-One Fulfillment Version 12.1.1 One-to-One Fulfillment Version 12.1.2 One-to-One Fulfillment Version 12.1.3 One-to-One Fulfillment Version 12.2.3 One-to-One Fulfillment Version 12.2.4 One-to-One Fulfillment Version 12.2.5 Common Applications Calendar Version 12.1.1 Common Applications Calendar Version 12.1.2 Common Applications Calendar Version 12.1.3 Common Applications Calendar Version 12.2.3 Common Applications Calendar Version 12.2.4 Common Applications Calendar Version 12.2.5 Applications Technology Stack Version 12.1.3 Applications Technology Stack Version 12.2.3 Applications Technology Stack Version 12.2.4 Applications Technology Stack Version 12.2.5 E-Business Suite Secure Enterprise Search Version 12.1.3 E-Business Suite Secure Enterprise Search Version 12.2.3 E-Business Suite Secure Enterprise Search Version 12.2.4 E-Business Suite Secure Enterprise Search Version 12.2.5 Enterprise Manager for Fusion Middleware Version 11.1.1.7 Enterprise Manager for Fusion Middleware Version 11.1.1.9 Enterprise Manager Base Platform Version 12.1.0.5 Enterprise Manager Base Platform Version 13.1.0.0 Enterprise Manager Ops Center Version 12.1.4 Enterprise Manager Ops Center Version 12.2.2 Enterprise Manager Ops Center Version 12.3.2 FLEXCUBE Direct Banking Version 12.0.1 FLEXCUBE Direct Banking Version 12.0.2 FLEXCUBE Direct Banking Version 12.0.3 Banking Platform Version 2.3.0 Banking Platform Version 2.4.0 Banking Platform Version 2.4.1 Banking Platform Version 2.5.0 Financial Services Lending and Leasing Version 14.1 Financial Services Lending and Leasing Version 14.2 Portal Version 11.1.1.6 JDeveloper Version 11.1.1.7.0 JDeveloper Version 11.1.1.9.0 JDeveloper Version 11.1.2.4.0 JDeveloper Version 12.1.3.0.0 JDeveloper Version 12.2.1.0.0 HTTP Server Version 11.1.1.9 HTTP Server Version 12.1.3.0 TopLink Version 12.1.3.0 TopLink Version 12.2.1.0 TopLink Version 12.2.1.1 BI Publisher (formerly XML Publisher) Version 11.1.1.7.0 BI Publisher (formerly XML Publisher) Version 11.1.1.9.0 BI Publisher (formerly XML Publisher) Version 12.2.1.0.0 COREid Access Version 10.1.4.x COREid Access Version 11.1.1.7 Business Intelligence Enterprise Edition Version 11.1.1.7.0 Business Intelligence Enterprise Edition Version 11.1.1.9.0 Business Intelligence Enterprise Edition Version 11.2.1.0.0 Outside In Technology Version 8.5.0 Outside In Technology Version 8.5.1 Outside In Technology Version 8.5.2 WebLogic Server Version 10.3.6.0 WebLogic Server Version 12.1.3.0 WebLogic Server Version 12.2.1.0 GlassFish Server Version 2.1.1 GlassFish Server Version 3.0.1 GlassFish Server Version 3.1.2 Directory Server Enterprise Edition Version 11.1.1.7.0 Directory Server Enterprise Edition Version 7.0 Exalogic Infrastructure Version 1.x Exalogic Infrastructure Version 2.x WebCenter Sites Version 11.1.1.8 WebCenter Sites Version 12.2.1.0 Healthcare Master Person Index Version 2.0.12 Healthcare Master Person Index Version 3.0.0 Healthcare Master Person Index Version 4.0.1 Health Sciences Information Manager Version 1.2.8.3 Health Sciences Information Manager Version 2.0.2.3 Health Sciences Information Manager Version 3.0.1.0 Healthcare Analytics Data Integration Version 3.1.0.0.0 Health Sciences Clinical Development Center Version 3.1.1.x Health Sciences Clinical Development Center Version 3.1.2.x Hyperion Financial Reporting Version 11.1.2.4 Insurance Policy Administration J2EE Version 10.0.1 Insurance Policy Administration J2EE Version 10.1.2 Insurance Policy Administration J2EE Version 10.2.0 Insurance Policy Administration J2EE Version 10.2.2 Insurance Policy Administration J2EE Version 9.6.1 Insurance Policy Administration J2EE Version 9.7.1 Insurance Rules Palette Version 10.0.1 Insurance Rules Palette Version 10.1.2 Insurance Rules Palette Version 10.2.0 Insurance Rules Palette Version 10.2.2 Insurance Rules Palette Version 9.6.1 Insurance Rules Palette Version 9.7.1 Documaker Version Prior to 12.5 Insurance Calculation Engine Version 10.1.2 Insurance Calculation Engine Version 10.2.2 Insurance Calculation Engine Version 9.7.1 JD Edwards EnterpriseOne Tools Version 9.2.0.5 Java Version 7u101 Java Version 8u92 Java Version 8u92; Java SE Embedded: 8u91 Java Version 8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 Java Version Java SE: 6u115 Java Version Java SE: 7u101 Java Version Java SE: 8u92 Java Version Java SE: 8u92; Java SE Embedded: 8u91 MySQL Server Version 5.5.45 and earlier MySQL Server Version 5.5.48 and earlier MySQL Server Version 5.5.49 and earlier MySQL Server Version 5.6.26 and earlier MySQL Server Version 5.6.29 and earlier MySQL Server Version 5.6.30 and earlier MySQL Server Version 5.7.10 and earlier MySQL Server Version 5.7.11 and earlier MySQL Server Version 5.7.12 and earlier PeopleSoft Enterprise PT PeopleTools Version 8.53 PeopleSoft Enterprise PT PeopleTools Version 8.54 PeopleSoft Enterprise PT PeopleTools Version 8.55 PeopleSoft Enterprise SCM eProcurement Version 9.1 PeopleSoft Enterprise SCM eProcurement Version 9.2 Policy Automation Version 10.3.0 Policy Automation Version 10.3.1 Policy Automation Version 10.4.0 Policy Automation Version 10.4.1 Policy Automation Version 10.4.2 Policy Automation Version 10.4.3 Policy Automation Version 10.4.4 Policy Automation Version 10.4.5 Policy Automation Version 10.4.6 Policy Automation Version 12.1.0 Policy Automation Version 12.1.1 Policy Automation for Mobile Devices Version 12.1.1 Policy Automation Connector for Siebel Version 10.3.0 Policy Automation Connector for Siebel Version 10.4.0 Policy Automation Connector for Siebel Version 10.4.1 Policy Automation Connector for Siebel Version 10.4.2 Policy Automation Connector for Siebel Version 10.4.3 Policy Automation Connector for Siebel Version 10.4.4 Policy Automation Connector for Siebel Version 10.4.5 Policy Automation Connector for Siebel Version 10.4.6 In-Memory Policy Analytics Version 12.0.1 Primavera P6 Enterprise Project Portfolio Management Version 15.1 Primavera P6 Enterprise Project Portfolio Management Version 15.2 Primavera P6 Enterprise Project Portfolio Management Version 16.1 Primavera P6 Enterprise Project Portfolio Management Version 8.2 Primavera P6 Enterprise Project Portfolio Management Version 8.3 Primavera P6 Enterprise Project Portfolio Management Version 8.4 Primavera P6 Professional Project Management Version 15.1 Primavera P6 Professional Project Management Version 15.2 Primavera P6 Professional Project Management Version 8.3 Primavera P6 Professional Project Management Version 8.4 Primavera Contract Management Version 14.2 Retail Integration Bus Version 13.0 Retail Integration Bus Version 13.1 Retail Integration Bus Version 13.2 Retail Integration Bus Version 14.0 Retail Integration Bus Version 14.1 Retail Integration Bus Version 15.0 Retail Store Inventory Management Version 12.0 Retail Store Inventory Management Version 13.0 Retail Store Inventory Management Version 13.1 Retail Store Inventory Management Version 13.2 Retail Store Inventory Management Version 14.0 Retail Store Inventory Management Version 14.1 Retail Point-of-Service Version 12.0 13.0 Retail Point-of-Service Version 13.1 Retail Point-of-Service Version 13.2 Retail Point-of-Service Version 13.3 Retail Point-of-Service Version 13.4 Retail Point-of-Service Version 14.0 Retail Point-of-Service Version 14.1 Retail Service Backbone Version 13.0 Retail Service Backbone Version 13.1 Retail Service Backbone Version 13.2 Retail Service Backbone Version 14.0 Retail Service Backbone Version 14.1 Retail Service Backbone Version 15.0 XBRi Cloud Service Version 10.0.1 XBRi Cloud Service Version 10.5.0 XBRi Cloud Service Version 10.6.0 XBRi Cloud Service Version 10.7.0 XBRi Cloud Service Version 10.8.0 XBRi Cloud Service Version 10.8.1 Retail Order Broker Cloud Service Version 15.0 Retail Order Broker Cloud Service Version 4.1 Retail Order Broker Cloud Service Version 5.1 Retail Order Broker Cloud Service Version 5.2 Siebel Core - Server Framework Version 8.1.1 Siebel Core - Server Framework Version 8.2.2 Siebel Core - Server Framework Version IP2014 Siebel Core - Server Framework Version IP2015 Siebel Core - Server Framework Version IP2016 Siebel UI Framework Version 8.1.1 Siebel UI Framework Version 8.2.2 Siebel UI Framework Version IP2014 Siebel UI Framework Version IP2015 Siebel UI Framework Version IP2016 Siebel Engineering - Installer and Deployment Version 8.1.1 Siebel Engineering - Installer and Deployment Version 8.2.2 Siebel Engineering - Installer and Deployment Version IP2014 Siebel Engineering - Installer and Deployment Version IP2015 Siebel Engineering - Installer and Deployment Version IP2016 Knowledge Version 8.5.x Siebel Core - Common Components Version 8.1.1 Siebel Core - Common Components Version 8.2.2 Siebel Core - Common Components Version IP2014 Siebel Core - Common Components Version IP2015 Siebel Core - Common Components Version IP2016 SPARC - OPL Service Processor (XCP) Version XCP prior to XCP1121 SSM - (hot-tamale) ILOM: Integrated Lights Out Manager Version 3.0 SSM - (hot-tamale) ILOM: Integrated Lights Out Manager Version 3.1 SSM - (hot-tamale) ILOM: Integrated Lights Out Manager Version 3.2 nm2-gw Version Versions prior to 2.2.2 nm2-36p Version Versions prior to 2.2.2 OPUS 10G Ethernet Switch Family Version 1.2 OPUS 10G Ethernet Switch Family Version 1.3 OPUS 10G Ethernet Switch Family Version 2.0.0 Solaris Cluster Version 3.3 Solaris Cluster Version 4.3 Solaris Operating System Version 10 Solaris Operating System Version 11.3 Fujitsu M10 Firmware Version XCP prior to XCP2280 Fujitsu M10 Firmware Version XCP prior to XCP2320 Demand Planning Version 12.1 Demand Planning Version 12.2 Transportation Management Version 6.3.0 Transportation Management Version 6.3.1 Transportation Management Version 6.3.2 Transportation Management Version 6.3.3 Transportation Management Version 6.3.4 Transportation Management Version 6.3.5 Transportation Management Version 6.3.6 Transportation Management Version 6.3.7 Transportation Management Version 6.4.0 Transportation Management Version 6.4.1 Agile Engineering Data Management Version 6.1.3.0 Agile Engineering Data Management Version 6.2.0.0 Agile PLM Framework Version 9.3.4 Agile PLM Framework Version 9.3.5 Utilities Network Management System Version 1.10.0.6.27 Utilities Network Management System Version 1.11.0.4.41 Utilities Network Management System Version 1.11.0.5.4 Utilities Network Management System Version 1.12.0.1.16 Utilities Network Management System Version 1.12.0.2.12.1.12.0.3.5 Utilities Work and Asset Management Version 1.9.1.2.8 Utilities Framework Version 2.2.0.0.0 Utilities Framework Version 4.1.0.1.0 Utilities Framework Version 4.1.0.2.0 Utilities Framework Version 4.2.0.1.0 Utilities Framework Version 4.2.0.2.0 Utilities Framework Version 4.2.0.3.0 Utilities Framework Version 4.3.0.1.0 Utilities Framework Version 4.3.0.2.0 Oracle VM VirtualBox Version VirtualBox prior to 5.0.22 Oracle VM VirtualBox Version VirtualBox prior to 5.0.26 Secure Global Desktop Version 4.63 Secure Global Desktop Version 4.71 Secure Global Desktop Version 5.2 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.2, 8.3 and 8.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2012-3137 P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 6.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Restricted Shell). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise ILOM. Successful attacks of this vulnerability can result in takeover of ILOM. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2012-3410 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Oracle Secure Global Desktop component of Oracle Virtualization (subcomponent: X Server). Supported versions that are affected are 4.71 and 5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via X11 to compromise Oracle Secure Global Desktop. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Secure Global Desktop accessible data as well as unauthorized read access to a subset of Oracle Secure Global Desktop accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Secure Global Desktop. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2013-2064 P-8539V-4.71 P-8539V-5.2 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8539V-4.71 P-8539V-5.2 Vulnerability in the Fujitsu M10-1, M10-4, M10-4S Servers component of Oracle Sun Systems Products Suite (subcomponent: XCP Firmware). The supported version that is affected is XCP prior to XCP2280. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Fujitsu M10-1, M10-4, M10-4S Servers. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Fujitsu M10-1, M10-4, M10-4S Servers accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N). Fix has been released CVE-2013-2566 P-10656V-XCP prior to XCP2280 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10656V-XCP prior to XCP2280 Vulnerability in the Oracle Financial Services Lending and Leasing component of Oracle Financial Services Applications (subcomponent: Admin and setup). Supported versions that are affected are 14.1 and 14.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Lending and Leasing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Lending and Leasing accessible data as well as unauthorized read access to a subset of Oracle Financial Services Lending and Leasing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Lending and Leasing. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2014-0224 P-10484V-14.1 P-10484V-14.2 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10484V-14.1 P-10484V-14.2 Vulnerability in the Sun Network QDR InfiniBand Gateway Switch component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Versions prior to 2.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Sun Network QDR InfiniBand Gateway Switch. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun Network QDR InfiniBand Gateway Switch accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). Fix has been released CVE-2014-3566 P-9885V-Versions prior to 2.2.2 3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9885V-Versions prior to 2.2.2 Vulnerability in the Sun Data Center InfiniBand Switch 36 component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Versions prior to 2.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Sun Data Center InfiniBand Switch 36. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun Data Center InfiniBand Switch 36 accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). Fix has been released CVE-2014-3566 P-9886V-Versions prior to 2.2.2 3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9886V-Versions prior to 2.2.2 Vulnerability in the Oracle Communications Core Session Manager component of Oracle Communications Applications (subcomponent: Routing). Supported versions that are affected are 7.2.5 and 7.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Communications Core Session Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications Core Session Manager. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2014-3571 P-10754V-7.2.5 P-10754V-7.3.5 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10754V-7.2.5 P-10754V-7.3.5 Vulnerability in the Oracle Enterprise Communications Broker component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is Prior to PCz 2.0.0m4p1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Communications Broker. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Fix has been released CVE-2014-9708 P-10758V-Prior to PCz 2.0.0m4p1 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10758V-Prior to PCz 2.0.0m4p1 Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.1 and 12.1.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all RDBMS accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N). Fix has been released CVE-2015-0204 P-5V-12.1.0.1 P-5V-12.1.0.2 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-12.1.0.1 P-5V-12.1.0.2 Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: Update Provisioning). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Fix has been released CVE-2015-0228 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the Sun Network QDR InfiniBand Gateway Switch component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Versions prior to 2.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun Network QDR InfiniBand Gateway Switch. Successful attacks of this vulnerability can result in takeover of Sun Network QDR InfiniBand Gateway Switch. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-0235 P-9885V-Versions prior to 2.2.2 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9885V-Versions prior to 2.2.2 Vulnerability in the Sun Data Center InfiniBand Switch 36 component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Versions prior to 2.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Sun Data Center InfiniBand Switch 36. Successful attacks of this vulnerability can result in takeover of Sun Data Center InfiniBand Switch 36. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-0235 P-9886V-Versions prior to 2.2.2 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9886V-Versions prior to 2.2.2 Vulnerability in the Oracle Communications EAGLE Application Processor component of Oracle Communications Applications (subcomponent: Other). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Application Processor. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-0235 P-11122V-16.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11122V-16.0 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Project manager). Supported versions that are affected are 8.3, 8.4 and 15.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L). Fix has been released CVE-2015-1791 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 6.5 AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: OpenSSL). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of ILOM accessible data as well as unauthorized read access to a subset of ILOM accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2015-1793 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers component of Oracle Sun Systems Products Suite (subcomponent: XCP Firmware). The supported version that is affected is XCP prior to XCP1121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-2808 P-9845V-XCP prior to XCP1121 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9845V-XCP prior to XCP1121 Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is Prior to 9.9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Policy Management accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2015-2808 P-10900V-Prior to 9.9.2 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10900V-Prior to 9.9.2 Vulnerability in the SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers component of Oracle Sun Systems Products Suite (subcomponent: XCP Firmware). The supported version that is affected is XCP prior to XCP1121. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all SPARC Enterprise M3000, M4000, M5000, M8000, M9000 Servers accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N). Fix has been released CVE-2015-3183 P-9845V-XCP prior to XCP1121 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9845V-XCP prior to XCP1121 Vulnerability in the Oracle Communications Network Charging and Control component of Oracle Communications Applications (subcomponent: DAP, OSD, PI). Supported versions that are affected are 5.0.2.0.0, 5.0.1.0.0, 5.0.0.2.0, 5.0.0.1.0 and 4.4.1.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS/SSL to compromise Oracle Communications Network Charging and Control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Network Charging and Control accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-4623V-5.0.2.0.0 P-4623V-5.0.1.0.0 P-4623V-5.0.0.2.0 P-4623V-5.0.0.1.0 P-4623V-4.4.1.5.0 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4623V-5.0.2.0.0 P-4623V-5.0.1.0.0 P-4623V-5.0.0.2.0 P-4623V-5.0.0.1.0 P-4623V-4.4.1.5.0 Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Enterprise Infrastructure SEC). The supported version that is affected is 9.2.0.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-4781V-9.2.0.5 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4781V-9.2.0.5 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Project manager). Supported versions that are affected are 8.3, 8.4, 15.1 and 15.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-5580V-8.3 P-5580V-8.4 P-5580V-15.1 P-5580V-15.2 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5580V-8.3 P-5580V-8.4 P-5580V-15.1 P-5580V-15.2 Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: Networking). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Ops Center accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the 40G 10G 72/64 Ethernet Switch component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is 2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise 40G 10G 72/64 Ethernet Switch. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all 40G 10G 72/64 Ethernet Switch accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-9889V-2.0.0 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9889V-2.0.0 Vulnerability in the Oracle Switch ES1-24 component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is 1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Oracle Switch ES1-24. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Switch ES1-24 accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-9889V-1.3 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9889V-1.3 Vulnerability in the Sun Blade 6000 Ethernet Switched NEM 24P 10GE component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is 1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun Blade 6000 Ethernet Switched NEM 24P 10GE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Sun Blade 6000 Ethernet Switched NEM 24P 10GE accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-9889V-1.2 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9889V-1.2 Vulnerability in the Sun Network 10GE Switch 72p component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is 1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun Network 10GE Switch 72p. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Sun Network 10GE Switch 72p accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2015-3197 P-9889V-1.2 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9889V-1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). Fix has been released CVE-2015-3237 P-8493V-3.0.1 P-8493V-3.1.2 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8493V-3.0.1 P-8493V-3.1.2 Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: Networking). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Enterprise Manager Ops Center accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). Fix has been released CVE-2015-3237 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the Oracle Retail Store Inventory Management component of Oracle Retail Applications (subcomponent: SIMINT). Supported versions that are affected are 13.2, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Store Inventory Management. Successful attacks of this vulnerability can result in takeover of Oracle Retail Store Inventory Management. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-3253 P-1838V-13.2 P-1838V-14.0 P-1838V-14.1 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1838V-13.2 P-1838V-14.0 P-1838V-14.1 Vulnerability in the Oracle Health Sciences Clinical Development Center component of Oracle Health Sciences Applications (subcomponent: Installation and configuration). Supported versions that are affected are 3.1.1.x and 3.1.2.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences Clinical Development Center. Successful attacks of this vulnerability can result in takeover of Oracle Health Sciences Clinical Development Center. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-3253 P-9652V-3.1.1.x P-9652V-3.1.2.x 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9652V-3.1.1.x P-9652V-3.1.2.x Vulnerability in the Oracle Retail Service Backbone component of Oracle Retail Applications (subcomponent: Install). Supported versions that are affected are 13.0, 13.1, 13.2, 14.0, 14.1 and 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Service Backbone. Successful attacks of this vulnerability can result in takeover of Oracle Retail Service Backbone. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-3253 P-10867V-13.0 P-10867V-13.1 P-10867V-13.2 P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10867V-13.0 P-10867V-13.1 P-10867V-13.2 P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 Vulnerability in the Oracle Retail Order Broker component of Oracle Retail Applications (subcomponent: System Administration). Supported versions that are affected are 4.1, 5.1, 5.2 and 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Order Broker. Successful attacks of this vulnerability can result in takeover of Oracle Retail Order Broker. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-3253 P-11520V-4.1 P-11520V-5.1 P-11520V-5.2 P-11520V-15.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11520V-4.1 P-11520V-5.1 P-11520V-5.2 P-11520V-15.0 Vulnerability in the Oracle Communications Session Border Controller component of Oracle Communications Applications (subcomponent: System). Supported versions that are affected are 7.2.0 and 7.3.0. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Communications Session Border Controller executes to compromise Oracle Communications Session Border Controller. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Session Border Controller accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Session Border Controller. CVSS 3.0 Base Score 3.7 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L). Fix has been released CVE-2015-5300 P-10750V-7.2.0 P-10750V-7.3.0 3.7 AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10750V-7.2.0 P-10750V-7.3.0 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: SSH). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of ILOM and unauthorized read access to a subset of ILOM accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H). Fix has been released CVE-2015-5600 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Security). Supported versions that are affected are Prior to 7.0.5.37.0 and 8.0.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Messaging Server. Successful attacks of this vulnerability can result in takeover of Oracle Communications Messaging Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7182 P-8496V-Prior to 7.0.5.37.0 and 8.0.1.1.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8496V-Prior to 7.0.5.37.0 and 8.0.1.1.0 Vulnerability in the Oracle Directory Server Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Admin Server). Supported versions that are affected are 7.0 and 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Directory Server Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Directory Server Enterprise Edition. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7182 P-8512V-7.0 P-8512V-11.1.1.7.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8512V-7.0 P-8512V-11.1.1.7.0 Vulnerability in the Oracle Retail Store Inventory Management component of Oracle Retail Applications (subcomponent: SIMINT). Supported versions that are affected are 12.0, 13.0, 13.1, 13.2, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Store Inventory Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Store Inventory Management accessible data as well as unauthorized read access to a subset of Oracle Retail Store Inventory Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Store Inventory Management. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2015-7501 P-1838V-12.0 P-1838V-13.0 P-1838V-13.1 P-1838V-13.2 P-1838V-14.0 P-1838V-14.1 6.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1838V-12.0 P-1838V-13.0 P-1838V-13.1 P-1838V-13.2 P-1838V-14.0 P-1838V-14.1 Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Web Container). Supported versions that are affected are 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0 and 6.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in takeover of Oracle Transportation Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-1991V-6.3.0 P-1991V-6.3.1 P-1991V-6.3.2 P-1991V-6.3.3 P-1991V-6.3.4 P-1991V-6.3.5 P-1991V-6.3.6 P-1991V-6.3.7 P-1991V-6.4.0 P-1991V-6.4.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1991V-6.3.0 P-1991V-6.3.1 P-1991V-6.3.2 P-1991V-6.3.3 P-1991V-6.3.4 P-1991V-6.3.5 P-1991V-6.3.6 P-1991V-6.3.7 P-1991V-6.4.0 P-1991V-6.4.1 Vulnerability in the Oracle Retail Central, Back Office, Returns Management component of Oracle Retail Applications (subcomponent: Install). Supported versions that are affected are 12.0 13.0, 13.1, 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Central, Back Office, Returns Management. Successful attacks of this vulnerability can result in takeover of Oracle Retail Central, Back Office, Returns Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-2017V-12.0 13.0 P-2017V-13.1 P-2017V-13.2 P-2017V-13.3 P-2017V-13.4 P-2017V-14.0 P-2017V-14.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2017V-12.0 13.0 P-2017V-13.1 P-2017V-13.2 P-2017V-13.3 P-2017V-13.4 P-2017V-14.0 P-2017V-14.1 Vulnerability in the Oracle Utilities Network Management System component of Oracle Utilities Applications (subcomponent: System wide). Supported versions that are affected are 1.10.0.6.27, 1.11.0.4.41, 1.11.0.5.4, 1.12.0.1.16 and 1.12.0.2.12. 1.12.0.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in takeover of Oracle Utilities Network Management System. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-2241V-1.10.0.6.27 P-2241V-1.11.0.4.41 P-2241V-1.11.0.5.4 P-2241V-1.12.0.1.16 P-2241V-1.12.0.2.12.1.12.0.3.5 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2241V-1.10.0.6.27 P-2241V-1.11.0.4.41 P-2241V-1.11.0.5.4 P-2241V-1.12.0.1.16 P-2241V-1.12.0.2.12.1.12.0.3.5 Vulnerability in the Oracle Utilities Work and Asset Management component of Oracle Utilities Applications (subcomponent: Integrations). The supported version that is affected is 1.9.1.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Work and Asset Management. Successful attacks of this vulnerability can result in takeover of Oracle Utilities Work and Asset Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-2244V-1.9.1.2.8 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2244V-1.9.1.2.8 Vulnerability in the Oracle Utilities Framework component of Oracle Utilities Applications (subcomponent: System wide). Supported versions that are affected are 2.2.0.0.0, 4.1.0.1.0, 4.1.0.2.0, 4.2.0.1.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 and 4.3.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Framework. Successful attacks of this vulnerability can result in takeover of Oracle Utilities Framework. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-2245V-2.2.0.0.0 P-2245V-4.1.0.1.0 P-2245V-4.1.0.2.0 P-2245V-4.2.0.1.0 P-2245V-4.2.0.2.0 P-2245V-4.2.0.3.0 P-2245V-4.3.0.1.0 P-2245V-4.3.0.2.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2245V-2.2.0.0.0 P-2245V-4.1.0.1.0 P-2245V-4.1.0.2.0 P-2245V-4.2.0.1.0 P-2245V-4.2.0.2.0 P-2245V-4.2.0.3.0 P-2245V-4.3.0.1.0 P-2245V-4.3.0.2.0 Vulnerability in the Oracle Communications ASAP component of Oracle Communications Applications (subcomponent: Service request translator). Supported versions that are affected are 7.0, 7.2 and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via T3 to compromise Oracle Communications ASAP. Successful attacks of this vulnerability can result in takeover of Oracle Communications ASAP. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-2260V-7.0 P-2260V-7.2 P-2260V-7.3 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2260V-7.0 P-2260V-7.2 P-2260V-7.3 Vulnerability in the Oracle Insurance Policy Administration J2EE component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.6.1, 9.7.1, 10.0.1, 10.1.2, 10.2.0 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Policy Administration J2EE. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Policy Administration J2EE. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5279V-9.6.1 P-5279V-9.7.1 P-5279V-10.0.1 P-5279V-10.1.2 P-5279V-10.2.0 P-5279V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5279V-9.6.1 P-5279V-9.7.1 P-5279V-10.0.1 P-5279V-10.1.2 P-5279V-10.2.0 P-5279V-10.2.2 Vulnerability in the Oracle Insurance Rules Palette component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.6.1, 9.7.1, 10.0.1, 10.1.2, 10.2.0 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Rules Palette. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Rules Palette. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5288V-9.6.1 P-5288V-9.7.1 P-5288V-10.0.1 P-5288V-10.1.2 P-5288V-10.2.0 P-5288V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5288V-9.6.1 P-5288V-9.7.1 P-5288V-10.0.1 P-5288V-10.1.2 P-5288V-10.2.0 P-5288V-10.2.2 Vulnerability in the Oracle Documaker component of Oracle Insurance Applications (subcomponent: Development tools). The supported version that is affected is Prior to 12.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Documaker. Successful attacks of this vulnerability can result in takeover of Oracle Documaker. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5477V-Prior to 12.5 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5477V-Prior to 12.5 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera Contract Management component of Oracle Primavera Products Suite (subcomponent: PCM application). The supported version that is affected is 14.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Contract Management. Successful attacks of this vulnerability can result in takeover of Primavera Contract Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5581V-14.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5581V-14.2 Vulnerability in the Oracle Policy Automation component of Oracle Policy Automation (subcomponent: Determinations Engine). Supported versions that are affected are 10.3.0, 10.3.1, 10.4.0, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5, 10.4.6, 12.1.0 and 12.1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Policy Automation. Successful attacks of this vulnerability can result in takeover of Oracle Policy Automation. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5624V-10.3.0 P-5624V-10.3.1 P-5624V-10.4.0 P-5624V-10.4.1 P-5624V-10.4.2 P-5624V-10.4.3 P-5624V-10.4.4 P-5624V-10.4.5 P-5624V-10.4.6 P-5624V-12.1.0 P-5624V-12.1.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5624V-10.3.0 P-5624V-10.3.1 P-5624V-10.4.0 P-5624V-10.4.1 P-5624V-10.4.2 P-5624V-10.4.3 P-5624V-10.4.4 P-5624V-10.4.5 P-5624V-10.4.6 P-5624V-12.1.0 P-5624V-12.1.1 Vulnerability in the Oracle Policy Automation for Mobile Devices component of Oracle Policy Automation (subcomponent: Mobile Application). The supported version that is affected is 12.1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Policy Automation for Mobile Devices. Successful attacks of this vulnerability can result in takeover of Oracle Policy Automation for Mobile Devices. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5626V-12.1.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5626V-12.1.1 Vulnerability in the Oracle Policy Automation Connector for Siebel component of Oracle Policy Automation (subcomponent: Determinations Server). Supported versions that are affected are 10.3.0, 10.4.0, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5 and 10.4.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Policy Automation Connector for Siebel. Successful attacks of this vulnerability can result in takeover of Oracle Policy Automation Connector for Siebel. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-5627V-10.3.0 P-5627V-10.4.0 P-5627V-10.4.1 P-5627V-10.4.2 P-5627V-10.4.3 P-5627V-10.4.4 P-5627V-10.4.5 P-5627V-10.4.6 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5627V-10.3.0 P-5627V-10.4.0 P-5627V-10.4.1 P-5627V-10.4.2 P-5627V-10.4.3 P-5627V-10.4.4 P-5627V-10.4.5 P-5627V-10.4.6 Vulnerability in the Oracle Banking Platform component of Oracle Financial Services Applications (subcomponent: Rules collections). Supported versions that are affected are 2.3.0, 2.4.0 and 2.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Platform. Successful attacks of this vulnerability can result in takeover of Oracle Banking Platform. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-9178V-2.3.0 P-9178V-2.4.0 P-9178V-2.4.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9178V-2.3.0 P-9178V-2.4.0 P-9178V-2.4.1 Vulnerability in the Oracle Healthcare Analytics Data Integration component of Oracle Health Sciences Applications (subcomponent: Self Service Analytics). The supported version that is affected is 3.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Healthcare Analytics Data Integration. Successful attacks of this vulnerability can result in takeover of Oracle Healthcare Analytics Data Integration. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-9314V-3.1.0.0.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9314V-3.1.0.0.0 Vulnerability in the Oracle Health Sciences Clinical Development Center component of Oracle Health Sciences Applications (subcomponent: Installation and configuration). Supported versions that are affected are 3.1.1.x and 3.1.2.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences Clinical Development Center. Successful attacks of this vulnerability can result in takeover of Oracle Health Sciences Clinical Development Center. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-9652V-3.1.1.x P-9652V-3.1.2.x 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9652V-3.1.1.x P-9652V-3.1.2.x Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: Enterprise Controller Install). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in takeover of Enterprise Manager Ops Center. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the Oracle Insurance Calculation Engine component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.7.1, 10.1.2 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Calculation Engine. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Calculation Engine. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-10837V-9.7.1 P-10837V-10.1.2 P-10837V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10837V-9.7.1 P-10837V-10.1.2 P-10837V-10.2.2 Vulnerability in the Oracle Retail Service Backbone component of Oracle Retail Applications (subcomponent: Install). The supported version that is affected is 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Service Backbone. Successful attacks of this vulnerability can result in takeover of Oracle Retail Service Backbone. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-10867V-15.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10867V-15.0 Vulnerability in the Oracle In-Memory Policy Analytics component of Oracle Policy Automation (subcomponent: Analysis Server). The supported version that is affected is 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle In-Memory Policy Analytics. Successful attacks of this vulnerability can result in takeover of Oracle In-Memory Policy Analytics. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-11368V-12.0.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11368V-12.0.1 Vulnerability in the MICROS Retail XBRi Loss Prevention component of Oracle Retail Applications (subcomponent: Retail). Supported versions that are affected are 10.0.1, 10.5.0, 10.6.0, 10.7.0, 10.8.0 and 10.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Retail XBRi Loss Prevention. Successful attacks of this vulnerability can result in takeover of MICROS Retail XBRi Loss Prevention. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2015-7501 P-11506V-10.0.1 P-11506V-10.5.0 P-11506V-10.6.0 P-11506V-10.7.0 P-11506V-10.8.0 P-11506V-10.8.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11506V-10.0.1 P-11506V-10.5.0 P-11506V-10.6.0 P-11506V-10.7.0 P-11506V-10.8.0 P-11506V-10.8.1 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Solaris Kernel Zones). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Fix has been released CVE-2015-8104 P-10006V-11.3 6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications (subcomponent: Install). The supported version that is affected is 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration Bus. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-1807V-15.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1807V-15.0 Vulnerability in the Oracle Insurance Policy Administration J2EE component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.6.1, 9.7.1, 10.0.1, 10.1.2, 10.2.0 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Policy Administration J2EE. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Policy Administration J2EE. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-5279V-9.6.1 P-5279V-9.7.1 P-5279V-10.0.1 P-5279V-10.1.2 P-5279V-10.2.0 P-5279V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5279V-9.6.1 P-5279V-9.7.1 P-5279V-10.0.1 P-5279V-10.1.2 P-5279V-10.2.0 P-5279V-10.2.2 Vulnerability in the Oracle Insurance Rules Palette component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.6.1, 9.7.1, 10.0.1, 10.1.2, 10.2.0 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Rules Palette. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Rules Palette. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-5288V-9.6.1 P-5288V-9.7.1 P-5288V-10.0.1 P-5288V-10.1.2 P-5288V-10.2.0 P-5288V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5288V-9.6.1 P-5288V-9.7.1 P-5288V-10.0.1 P-5288V-10.1.2 P-5288V-10.2.0 P-5288V-10.2.2 Vulnerability in the Oracle Documaker component of Oracle Insurance Applications (subcomponent: Development tools). The supported version that is affected is Prior to 12.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Documaker. Successful attacks of this vulnerability can result in takeover of Oracle Documaker. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-5477V-Prior to 12.5 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5477V-Prior to 12.5 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.2 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera Contract Management component of Oracle Primavera Products Suite (subcomponent: PCM web services). The supported version that is affected is 14.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Contract Management. Successful attacks of this vulnerability can result in takeover of Primavera Contract Management. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-5581V-14.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5581V-14.2 Vulnerability in the Oracle Healthcare Master Person Index component of Oracle Health Sciences Applications (subcomponent: Internal operations). Supported versions that are affected are 2.0.12, 3.0.0 and 4.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Healthcare Master Person Index. Successful attacks of this vulnerability can result in takeover of Oracle Healthcare Master Person Index. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-8575V-2.0.12 P-8575V-3.0.0 P-8575V-4.0.1 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8575V-2.0.12 P-8575V-3.0.0 P-8575V-4.0.1 Vulnerability in the Oracle Health Sciences Information Manager component of Oracle Health Sciences Applications (subcomponent: Health Policy Monitor). Supported versions that are affected are 1.2.8.3, 2.0.2.3 and 3.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS, UDP to compromise Oracle Health Sciences Information Manager. Successful attacks of this vulnerability can result in takeover of Oracle Health Sciences Information Manager. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-9177V-1.2.8.3 P-9177V-2.0.2.3 P-9177V-3.0.1.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9177V-1.2.8.3 P-9177V-2.0.2.3 P-9177V-3.0.1.0 Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: Framework). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in takeover of Enterprise Manager Ops Center. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the Oracle Insurance Calculation Engine component of Oracle Insurance Applications (subcomponent: Architecture). Supported versions that are affected are 9.7.1, 10.1.2 and 10.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Calculation Engine. Successful attacks of this vulnerability can result in takeover of Oracle Insurance Calculation Engine. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-10837V-9.7.1 P-10837V-10.1.2 P-10837V-10.2.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10837V-9.7.1 P-10837V-10.1.2 P-10837V-10.2.2 Vulnerability in the Oracle Retail Order Broker component of Oracle Retail Applications (subcomponent: Order Broker Foundation). Supported versions that are affected are 5.1, 5.2 and 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Order Broker. Successful attacks of this vulnerability can result in takeover of Oracle Retail Order Broker. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-0635 P-11520V-5.1 P-11520V-5.2 P-11520V-15.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11520V-5.1 P-11520V-5.2 P-11520V-15.0 Vulnerability in the Oracle Communications Session Border Controller component of Oracle Communications Applications (subcomponent: Encryption). Supported versions that are affected are 7.2.0 and 7.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Communications Session Border Controller. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Session Border Controller accessible data as well as unauthorized read access to a subset of Oracle Communications Session Border Controller accessible data. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-0702 P-10750V-7.2.0 P-10750V-7.3.0 4.8 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10750V-7.2.0 P-10750V-7.3.0 Vulnerability in the Fujitsu M10-1, M10-4, M10-4S Servers component of Oracle Sun Systems Products Suite (subcomponent: XCP Firmware). The supported version that is affected is XCP prior to XCP2320. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Fujitsu M10-1, M10-4, M10-4S Servers. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Fujitsu M10-1, M10-4, M10-4S Servers accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-0800 P-10656V-XCP prior to XCP2320 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10656V-XCP prior to XCP2320 Vulnerability in the Oracle Portal component of Oracle Fusion Middleware (subcomponent: User and Group Security). The supported version that is affected is 11.1.1.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Portal. Successful attacks of this vulnerability can result in takeover of Oracle Portal. Note: Please refer to <a href="https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=2155256.1">My Oracle Support Note 2155256.1</a> for instructions on how to address this issue. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-1181 P-96V-11.1.1.6 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-96V-11.1.1.6 Vulnerability in the Oracle Banking Platform component of Oracle Financial Services Applications (subcomponent: OPS). Supported versions that are affected are 2.3.0, 2.4.0, 2.4.1 and 2.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Platform accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N). Fix has been released CVE-2016-1181 P-9178V-2.3.0 P-9178V-2.4.0 P-9178V-2.4.1 P-9178V-2.5.0 3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9178V-2.3.0 P-9178V-2.4.0 P-9178V-2.4.1 P-9178V-2.5.0 Vulnerability in the Oracle Exalogic Infrastructure component of Oracle Fusion Middleware (subcomponent: Base Image). Supported versions that are affected are 1.x and 2.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Exalogic Infrastructure. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Exalogic Infrastructure accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Exalogic Infrastructure. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L). Fix has been released CVE-2016-1548 P-9415V-1.x P-9415V-2.x 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9415V-1.x P-9415V-2.x Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-2105 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework). Supported versions that are affected are 12.1.0.5 and 13.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-1370V-12.1.0.5 P-1370V-13.1.0.0 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1370V-12.1.0.5 P-1370V-13.1.0.0 Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.x and 11.1.1.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-1773V-10.1.4.x P-1773V-11.1.1.7 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1773V-10.1.4.x P-1773V-11.1.1.7 Vulnerability in the Oracle Agile Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Install). Supported versions that are affected are 6.1.3.0 and 6.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-4436V-6.1.3.0 P-4436V-6.2.0.0 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4436V-6.1.3.0 P-4436V-6.2.0.0 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). Supported versions that are affected are 8.53, 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 Vulnerability in the Oracle Exalogic Infrastructure component of Oracle Fusion Middleware (subcomponent: Base Image). Supported versions that are affected are 1.x and 2.x. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Exalogic Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Exalogic Infrastructure accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-9415V-1.x P-9415V-2.x 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9415V-1.x P-9415V-2.x Vulnerability in the Oracle Communications Unified Session Manager component of Oracle Communications Applications (subcomponent: Routing). Supported versions that are affected are 7.2.5 and 7.3.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Communications Unified Session Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Unified Session Manager accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-2107 P-10753V-7.2.5 P-10753V-7.3.5 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10753V-7.2.5 P-10753V-7.3.5 Vulnerability in the MICROS Retail XBRi Loss Prevention component of Oracle Retail Applications (subcomponent: Retail). Supported versions that are affected are 10.0.1, 10.5.0, 10.6.0, 10.7.0, 10.8.0 and 10.8.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail XBRi Loss Prevention. Successful attacks of this vulnerability can result in takeover of MICROS Retail XBRi Loss Prevention. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3081 P-11506V-10.0.1 P-11506V-10.5.0 P-11506V-10.6.0 P-11506V-10.7.0 P-11506V-10.8.0 P-11506V-10.8.1 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11506V-10.0.1 P-11506V-10.5.0 P-11506V-10.6.0 P-11506V-10.7.0 P-11506V-10.8.0 P-11506V-10.8.1 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3424 P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher (formerly XML Publisher), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher (formerly XML Publisher) accessible data as well as unauthorized read access to a subset of BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3432 P-1479V-11.1.1.7.0 P-1479V-11.1.1.9.0 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1479V-11.1.1.7.0 P-1479V-11.1.1.9.0 Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3433 P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Fix has been released CVE-2016-3440 P-8478V-5.7.11 and earlier 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.11 and earlier Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications (subcomponent: Install). Supported versions that are affected are 13.0, 13.1, 13.2, 14.0, 14.1 and 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration Bus. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3444 P-1807V-13.0 P-1807V-13.1 P-1807V-13.2 P-1807V-14.0 P-1807V-14.1 P-1807V-15.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1807V-13.0 P-1807V-13.1 P-1807V-13.2 P-1807V-14.0 P-1807V-14.1 P-1807V-15.0 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Fix has been released CVE-2016-3445 P-5242V-10.3.6.0 P-5242V-12.1.3.0 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5242V-10.3.6.0 P-5242V-12.1.3.0 Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L). Fix has been released CVE-2016-3446 P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 8.3 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is Prior to 5.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Application Express accessible data as well as unauthorized read access to a subset of Application Express accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3448 P-1348V-Prior to 5.0.4 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1348V-Prior to 5.0.4 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3450 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Web). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ILOM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in ILOM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of ILOM accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3451 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.48 and earlier, 5.6.29 and earlier and 5.7.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3452 P-8478V-5.5.48 and earlier P-8478V-5.6.29 and earlier P-8478V-5.7.10 and earlier 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.48 and earlier P-8478V-5.6.29 and earlier P-8478V-5.7.10 and earlier Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3453 P-10006V-10 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-10 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: CORBA). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Fix has been released CVE-2016-3458 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3459 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is Prior to 5.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Express. While the vulnerability is in Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Application Express. CVSS 3.0 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L). Fix has been released CVE-2016-3467 P-1348V-Prior to 5.0.4 5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1348V-Prior to 5.0.4 Vulnerability in the Oracle Agile Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Install). Supported versions that are affected are 6.1.3.0 and 6.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTPP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3468 P-4436V-6.1.3.0 P-4436V-6.2.0.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4436V-6.1.3.0 P-4436V-6.2.0.0 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3469 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Install). The supported version that is affected is 6.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Transportation Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). Fix has been released CVE-2016-3470 P-1991V-6.4.1 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1991V-6.4.1 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Option). Supported versions that are affected are 5.5.45 and earlier and 5.6.26 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3471 P-8478V-5.5.45 and earlier P-8478V-5.6.26 and earlier 7.5 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.45 and earlier P-8478V-5.6.26 and earlier Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM (subcomponent: Web Server). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Engineering - Installer and Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Engineering - Installer and Deployment accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3472 P-9023V-8.1.1 P-9023V-8.2.2 P-9023V-IP2014 P-9023V-IP2015 P-9023V-IP2016 5.7 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9023V-8.1.1 P-9023V-8.2.2 P-9023V-IP2014 P-9023V-IP2015 P-9023V-IP2016 Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0 and 12.2.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized read access to a subset of BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3474 P-1479V-11.1.1.7.0 P-1479V-11.1.1.9.0 P-1479V-12.2.1.0.0 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1479V-11.1.1.7.0 P-1479V-11.1.1.9.0 P-1479V-12.2.1.0.0 Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager Console). The supported version that is affected is 8.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Knowledge accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3475 P-9571V-8.5.x 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9571V-8.5.x Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager Console). The supported version that is affected is 8.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge accessible data as well as unauthorized read access to a subset of Oracle Knowledge accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-3476 P-9571V-8.5.x 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9571V-8.5.x Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.49 and earlier, 5.6.30 and earlier and 5.7.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3477 P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 8.1 AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: File Processing). Supported versions that are affected are 8.53, 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3478 P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Portable Clusterware. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Portable Clusterware. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3479 P-5V-11.2.0.4 P-5V-12.1.0.2 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-11.2.0.4 P-5V-12.1.0.2 Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for Postgresql). Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris Cluster accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3480 P-10005V-3.3 P-10005V-4.3 4.4 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10005V-3.3 P-10005V-4.3 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Web). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise ILOM. While the vulnerability is in ILOM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of ILOM. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Fix has been released CVE-2016-3481 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: SSL/TLS Module). Supported versions that are affected are 11.1.1.9 and 12.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3482 P-1042V-11.1.1.9 P-1042V-12.1.3.0 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1042V-11.1.1.9 P-1042V-12.1.3.0 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: File Processing). Supported versions that are affected are 8.53, 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L). Fix has been released CVE-2016-3483 P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 7.2 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.1 and 12.1.0.2. Easily exploitable vulnerability allows high privileged attacker having Create Public Synonym privilege with logon to the infrastructure where Database Vault executes to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Database Vault accessible data as well as unauthorized read access to a subset of Database Vault accessible data. CVSS 3.0 Base Score 3.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-3484 P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 3.4 AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92; Java SE Embedded: 8u91; JRockit: R28.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 2.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N). Fix has been released CVE-2016-3485 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 2.9 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3486 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: WebCenter Sites). Supported versions that are affected are 11.1.1.8 and 12.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3487 P-9617V-11.1.1.8 P-9617V-12.2.1.0 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9617V-11.1.1.8 P-9617V-12.2.1.0 Vulnerability in the DB Sharding component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows high privileged attacker having Execute on gsmadmin_internal privilege with logon to the infrastructure where DB Sharding executes to compromise DB Sharding. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all DB Sharding accessible data. CVSS 3.0 Base Score 4.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N). Fix has been released CVE-2016-3488 P-5V-12.1.0.2 4.4 AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-12.1.0.2 Vulnerability in the Data Pump Import component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.1 and 12.1.0.2. Easily exploitable vulnerability allows high privileged attacker having Index on SYS.INCVID privilege with logon to the infrastructure where Data Pump Import executes to compromise Data Pump Import. Successful attacks of this vulnerability can result in takeover of Data Pump Import. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3489 P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 6.7 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). Supported versions that are affected are 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0 and 6.4.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Transportation Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 3.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N). Fix has been released CVE-2016-3490 P-1991V-6.3.0 P-1991V-6.3.1 P-1991V-6.3.2 P-1991V-6.3.3 P-1991V-6.3.4 P-1991V-6.3.5 P-1991V-6.3.6 P-1991V-6.3.7 P-1991V-6.4.0 P-1991V-6.4.1 3.0 AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1991V-6.3.0 P-1991V-6.3.1 P-1991V-6.3.2 P-1991V-6.3.3 P-1991V-6.3.4 P-1991V-6.3.5 P-1991V-6.3.6 P-1991V-6.3.7 P-1991V-6.4.0 P-1991V-6.4.1 Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Wireless Framework). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3491 P-1199V-12.1.3 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1199V-12.1.3 Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks of this vulnerability can result in takeover of Hyperion Financial Reporting. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3493 P-8776V-11.1.2.4 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8776V-11.1.2.4 Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Grid Control (subcomponent: OS Provisioning). Supported versions that are affected are 12.1.4, 12.2.2 and 12.3.2. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Enterprise Manager Ops Center executes to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3494 P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9835V-12.1.4 P-9835V-12.2.2 P-9835V-12.3.2 Vulnerability in the Enterprise Manager for Fusion Middleware component of Oracle Enterprise Manager Grid Control (subcomponent: SOA Topology Viewer). Supported versions that are affected are 11.1.1.7 and 11.1.1.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager for Fusion Middleware, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Enterprise Manager for Fusion Middleware accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N). Fix has been released CVE-2016-3496 P-1369V-11.1.1.7 P-1369V-11.1.1.9 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1369V-11.1.1.7 P-1369V-11.1.1.9 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3497 P-10006V-11.3 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u101 and 8u92. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Fix has been released CVE-2016-3498 P-856V-Java SE: 7u101 P-856V-8u92 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 7u101 P-856V-8u92 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 12.1.3.0 and 12.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3499 P-5242V-12.1.3.0 P-5242V-12.2.1.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5242V-12.1.3.0 P-5242V-12.2.1.0 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92; Java SE Embedded: 8u91; JRockit: R28.3.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Fix has been released CVE-2016-3500 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3501 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: WebCenter Sites). Supported versions that are affected are 11.1.1.8 and 12.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). Fix has been released CVE-2016-3502 P-9617V-11.1.1.8 P-9617V-12.2.1.0 6.5 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9617V-11.1.1.8 P-9617V-12.2.1.0 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3503 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92 7.7 AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92 Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3504 P-807V-11.1.1.7.0 P-807V-11.1.1.9.0 P-807V-11.1.2.4.0 P-807V-12.1.3.0.0 P-807V-12.2.1.0.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-807V-11.1.1.7.0 P-807V-11.1.1.9.0 P-807V-11.1.2.4.0 P-807V-12.1.3.0.0 P-807V-12.2.1.0.0 Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.1 and 12.1.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful attacks of this vulnerability can result in takeover of JDBC. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3506 P-972V-11.2.0.4 P-972V-12.1.0.1 P-972V-12.1.0.2 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-972V-11.2.0.4 P-972V-12.1.0.1 P-972V-12.1.0.2 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: WebClient / Admin). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Fix has been released CVE-2016-3507 P-4461V-9.3.4 P-4461V-9.3.5 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92; Java SE Embedded: 8u91; JRockit: R28.3.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Fix has been released CVE-2016-3508 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91; JRockit: R28.3.10 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Folders / URL Attachment). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3509 P-4461V-9.3.4 P-4461V-9.3.5 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3510 P-5242V-10.3.6.0 P-5242V-12.1.3.0 P-5242V-12.2.1.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5242V-10.3.6.0 P-5242V-12.1.3.0 P-5242V-12.2.1.0 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u101 and 8u92. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3511 P-856V-Java SE: 7u101 P-856V-8u92 7.7 AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 7u101 P-856V-8u92 Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Function Security). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3512 P-1374V-12.1.1 P-1374V-12.1.2 P-1374V-12.1.3 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1374V-12.1.1 P-1374V-12.1.2 P-1374V-12.1.3 Vulnerability in the Oracle Communications Operations Monitor component of Oracle Communications Applications (subcomponent: Infrastructure). The supported version that is affected is Prior to 3.3.92.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Communications Operations Monitor. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Operations Monitor accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3513 P-10761V-Prior to 3.3.92.0.0 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10761V-Prior to 3.3.92.0.0 Vulnerability in the Oracle Enterprise Communications Broker component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is Prior to PCz 2.0.0m4p1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Communications Broker accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3514 P-10758V-Prior to PCz 2.0.0m4p1 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10758V-Prior to PCz 2.0.0m4p1 Vulnerability in the Oracle Enterprise Communications Broker component of Oracle Communications Applications (subcomponent: Crash, network, system, admin). The supported version that is affected is Prior to PCz 2.0.0m4p1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Communications Broker accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3515 P-10758V-Prior to PCz 2.0.0m4p1 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10758V-Prior to PCz 2.0.0m4p1 Vulnerability in the Oracle Enterprise Communications Broker component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is Prior to PCz 2.0.0m4p1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Communications Broker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Communications Broker accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3516 P-10758V-Prior to PCz 2.0.0m4p1 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10758V-Prior to PCz 2.0.0m4p1 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PC / Get Shortcut). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Fix has been released CVE-2016-3517 P-4461V-9.3.4 P-4461V-9.3.5 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3518 P-8478V-5.7.12 and earlier 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PC / Get Shortcut). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3519 P-4461V-9.3.4 P-4461V-9.3.5 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: AOL Diagnostic tests). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3520 P-510V-12.1.3 P-510V-12.2.3 P-510V-12.2.4 P-510V-12.2.5 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-510V-12.1.3 P-510V-12.2.3 P-510V-12.2.4 P-510V-12.2.5 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Types). Supported versions that are affected are 5.5.49 and earlier, 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3521 P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3522 P-1171V-12.1.3 P-1171V-12.2.3 P-1171V-12.2.4 P-1171V-12.2.5 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1171V-12.1.3 P-1171V-12.2.3 P-1171V-12.2.4 P-1171V-12.2.5 Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3523 P-1171V-12.1.3 P-1171V-12.2.3 P-1171V-12.2.4 P-1171V-12.2.5 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1171V-12.1.3 P-1171V-12.2.3 P-1171V-12.2.4 P-1171V-12.2.5 Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Configuration). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology Stack accessible data as well as unauthorized read access to a subset of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-3524 P-1745V-12.1.3 P-1745V-12.2.3 P-1745V-12.2.4 P-1745V-12.2.5 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1745V-12.1.3 P-1745V-12.2.3 P-1745V-12.2.4 P-1745V-12.2.5 Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Cookie Management). The supported version that is affected is 12.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3525 P-99V-12.1.3 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-99V-12.1.3 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: SDK). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3526 P-4461V-9.3.4 P-4461V-9.3.5 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Demand Planning component of Oracle Supply Chain Products Suite (subcomponent: ODPDA Servlet). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demand Planning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Planning accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Planning accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3527 P-723V-12.1 P-723V-12.2 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-723V-12.1 P-723V-12.2 Vulnerability in the Oracle Internet Expenses component of Oracle E-Business Suite (subcomponent: Expenses Admin Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Internet Expenses. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Internet Expenses. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3528 P-397V-12.1.1 P-397V-12.1.2 P-397V-12.1.3 P-397V-12.2.3 P-397V-12.2.4 P-397V-12.2.5 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-397V-12.1.1 P-397V-12.1.2 P-397V-12.1.3 P-397V-12.2.3 P-397V-12.2.4 P-397V-12.2.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: SDK). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). Fix has been released CVE-2016-3529 P-4461V-9.3.4 P-4461V-9.3.5 5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PGC / Import). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L). Fix has been released CVE-2016-3530 P-4461V-9.3.4 P-4461V-9.3.5 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PC / Notification). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 3.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3531 P-4461V-9.3.4 P-4461V-9.3.5 3.5 AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Advanced Inbound Telephony component of Oracle E-Business Suite (subcomponent: SDK client integration). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Inbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Inbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Inbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Inbound Telephony accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3532 P-265V-12.1.1 P-265V-12.1.2 P-265V-12.1.3 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-265V-12.1.1 P-265V-12.1.2 P-265V-12.1.3 Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3533 P-1351V-12.1.1 P-1351V-12.1.2 P-1351V-12.1.3 P-1351V-12.2.3 P-1351V-12.2.4 P-1351V-12.2.5 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1351V-12.1.1 P-1351V-12.1.2 P-1351V-12.1.3 P-1351V-12.2.3 P-1351V-12.2.4 P-1351V-12.2.5 Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: Engineering Change Order). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3534 P-1118V-12.1.1 P-1118V-12.1.2 P-1118V-12.1.3 P-1118V-12.2.3 P-1118V-12.2.4 P-1118V-12.2.5 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1118V-12.1.1 P-1118V-12.1.2 P-1118V-12.1.3 P-1118V-12.2.3 P-1118V-12.2.4 P-1118V-12.2.5 Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Remote Launch). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3535 P-1199V-12.1.3 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1199V-12.1.3 Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Deliverables). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3536 P-229V-12.1.1 P-229V-12.1.2 P-229V-12.1.3 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-229V-12.1.1 P-229V-12.1.2 P-229V-12.1.3 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Folders / Attachment). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3537 P-4461V-9.3.4 P-4461V-9.3.5 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Folders / Attachment). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L). Fix has been released CVE-2016-3538 P-4461V-9.3.4 P-4461V-9.3.5 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Folders / Attachment). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L). Fix has been released CVE-2016-3539 P-4461V-9.3.4 P-4461V-9.3.5 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0.5 and 13.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3540 P-1370V-12.1.0.5 P-1370V-13.1.0.0 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1370V-12.1.0.5 P-1370V-13.1.0.0 Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Notes). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications Calendar accessible data as well as unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3541 P-1528V-12.1.1 P-1528V-12.1.2 P-1528V-12.1.3 P-1528V-12.2.3 P-1528V-12.2.4 P-1528V-12.2.5 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1528V-12.1.1 P-1528V-12.1.2 P-1528V-12.1.3 P-1528V-12.2.3 P-1528V-12.2.4 P-1528V-12.2.5 Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search, Browse). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Knowledge Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3542 P-1351V-12.1.1 P-1351V-12.1.2 P-1351V-12.1.3 P-1351V-12.2.3 P-1351V-12.2.4 P-1351V-12.2.5 6.5 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1351V-12.1.1 P-1351V-12.1.2 P-1351V-12.1.3 P-1351V-12.2.3 P-1351V-12.2.4 P-1351V-12.2.5 Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Tasks). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications Calendar accessible data as well as unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3543 P-1528V-12.1.1 P-1528V-12.1.2 P-1528V-12.1.3 P-1528V-12.2.3 P-1528V-12.2.4 P-1528V-12.2.5 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1528V-12.1.1 P-1528V-12.1.2 P-1528V-12.1.3 P-1528V-12.2.3 P-1528V-12.2.4 P-1528V-12.2.5 Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0 and 11.2.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-3544 P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 P-2025V-11.2.1.0.0 7.6 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2025V-11.1.1.7.0 P-2025V-11.1.1.9.0 P-2025V-11.2.1.0.0 Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Web based help screens). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3545 P-510V-12.1.3 P-510V-12.2.3 P-510V-12.2.4 P-510V-12.2.5 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-510V-12.1.3 P-510V-12.2.3 P-510V-12.2.4 P-510V-12.2.5 Vulnerability in the Oracle Advanced Collections component of Oracle E-Business Suite (subcomponent: Report JSPs). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Collections. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Collections accessible data as well as unauthorized access to critical data or complete access to all Oracle Advanced Collections accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3546 P-782V-12.1.1 P-782V-12.1.2 P-782V-12.1.3 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-782V-12.1.1 P-782V-12.1.2 P-782V-12.1.3 Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Content Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3547 P-1379V-12.1.1 P-1379V-12.1.2 P-1379V-12.1.3 P-1379V-12.2.3 P-1379V-12.2.4 P-1379V-12.2.5 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1379V-12.1.1 P-1379V-12.1.2 P-1379V-12.1.3 P-1379V-12.2.3 P-1379V-12.2.4 P-1379V-12.2.5 Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing activity collateral). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Marketing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3548 P-229V-12.1.1 P-229V-12.1.2 P-229V-12.1.3 P-229V-12.2.3 P-229V-12.2.4 P-229V-12.2.5 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-229V-12.1.1 P-229V-12.1.2 P-229V-12.1.3 P-229V-12.2.3 P-229V-12.2.4 P-229V-12.2.5 Vulnerability in the Oracle E-Business Suite Secure Enterprise Search component of Oracle E-Business Suite (subcomponent: Search Integration Engine). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite Secure Enterprise Search. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle E-Business Suite Secure Enterprise Search accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3549 P-4574V-12.1.3 P-4574V-12.2.3 P-4574V-12.2.4 P-4574V-12.2.5 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4574V-12.1.3 P-4574V-12.2.3 P-4574V-12.2.4 P-4574V-12.2.5 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u115, 7u101 and 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3550 P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 6u115 P-856V-7u101 P-856V-8u92; Java SE Embedded: 8u91 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). The supported version that is affected is Java SE: 8u92. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3552 P-856V-Java SE: 8u92 8.1 AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 8u92 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PC Core). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-3553 P-4461V-9.3.4 P-4461V-9.3.5 5.4 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PC / BOM, MCAD, Design). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3554 P-4461V-9.3.4 P-4461V-9.3.5 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: PGC / Excel Plugin). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3555 P-4461V-9.3.4 P-4461V-9.3.5 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: EM Integration). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3556 P-4461V-9.3.4 P-4461V-9.3.5 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Load). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3557 P-4461V-9.3.4 P-4461V-9.3.5 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Email Center Agent Console). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3558 P-950V-12.1.1 P-950V-12.1.2 P-950V-12.1.3 P-950V-12.2.3 P-950V-12.2.4 P-950V-12.2.5 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-950V-12.1.1 P-950V-12.1.2 P-950V-12.1.3 P-950V-12.2.3 P-950V-12.2.4 P-950V-12.2.5 Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Email Center Agent Console). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 and 12.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-3559 P-950V-12.1.1 P-950V-12.1.2 P-950V-12.1.3 P-950V-12.2.3 P-950V-12.2.4 P-950V-12.2.5 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-950V-12.1.1 P-950V-12.1.2 P-950V-12.1.3 P-950V-12.2.3 P-950V-12.2.4 P-950V-12.2.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: SDK). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-3560 P-4461V-9.3.4 P-4461V-9.3.5 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: SDK). Supported versions that are affected are 9.3.4 and 9.3.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2016-3561 P-4461V-9.3.4 P-4461V-9.3.5 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Security Framework). The supported version that is affected is 12.1.0.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Enterprise Manager Base Platform executes to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N). Fix has been released CVE-2016-3563 P-1370V-12.1.0.5 6.3 AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1370V-12.1.0.5 Vulnerability in the Oracle TopLink component of Oracle Fusion Middleware (subcomponent: JPA-RS). Supported versions that are affected are 12.1.3.0, 12.2.1.0 and 12.2.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle TopLink. Successful attacks of this vulnerability can result in takeover of Oracle TopLink. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3564 P-1339V-12.1.3.0 P-1339V-12.2.1.0 P-1339V-12.2.1.1 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1339V-12.1.3.0 P-1339V-12.2.1.0 P-1339V-12.2.1.1 Vulnerability in the Oracle Retail Order Broker component of Oracle Retail Applications (subcomponent: System Administration). Supported versions that are affected are 5.1 and 5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Order Broker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Order Broker accessible data as well as unauthorized read access to a subset of Oracle Retail Order Broker accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Order Broker. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L). Fix has been released CVE-2016-3565 P-11520V-5.1 P-11520V-5.2 7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11520V-5.1 P-11520V-5.2 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3566 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3567 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3568 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3569 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3570 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3571 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3572 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.4 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3573 P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5579V-8.3 P-5579V-8.4 P-5579V-15.1 P-5579V-15.2 P-5579V-16.1 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3574 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3575 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3576 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3577 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3578 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3579 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3580 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3581 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3582 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3583 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Libadimalloc). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3584 P-10006V-11.3 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Emulex). Supported versions that are affected are 3.0, 3.1 and 3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all ILOM accessible data as well as unauthorized access to critical data or complete access to all ILOM accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-3585 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 7.4 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3586 P-5242V-10.3.6.0 P-5242V-12.1.3.0 P-5242V-12.2.1.0 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5242V-10.3.6.0 P-5242V-12.1.3.0 P-5242V-12.2.1.0 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). The supported version that is affected is Java SE: 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3587 P-856V-Java SE: 8u92; Java SE Embedded: 8u91 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 8u92; Java SE Embedded: 8u91 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB ). Supported versions that are affected are 5.7.12 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). Fix has been released CVE-2016-3588 P-8478V-5.7.12 and earlier 5.9 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Base). Supported versions that are affected are 12.0.1, 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-3589 P-9111V-12.0.1 P-9111V-12.0.2 P-9111V-12.0.3 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9111V-12.0.1 P-9111V-12.0.2 P-9111V-12.0.3 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3590 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3591 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3592 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3593 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3594 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3595 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.0, 8.5.1 and 8.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-3596 P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 8.6 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-2276V-8.5.0 P-2276V-8.5.1 P-2276V-8.5.2 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is VirtualBox prior to 5.0.26. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3597 P-8370V-VirtualBox prior to 5.0.26 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8370V-VirtualBox prior to 5.0.26 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3598 P-856V-Java SE: 8u92; Java SE Embedded: 8u91 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 8u92; Java SE Embedded: 8u91 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u101 and 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3606 P-856V-Java SE: 7u101 P-856V-8u92; Java SE Embedded: 8u91 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 7u101 P-856V-8u92; Java SE Embedded: 8u91 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3607 P-8493V-3.0.1 P-8493V-3.1.2 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8493V-3.0.1 P-8493V-3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). Fix has been released CVE-2016-3608 P-8493V-3.0.1 5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8493V-3.0.1 Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.1 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to compromise OJVM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. Note: The score 9.0 is for Windows platform. On Linux platform the score is 8.0. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3609 P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 9.0 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5V-11.2.0.4 P-5V-12.1.0.1 P-5V-12.1.0.2 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u92; Java SE Embedded: 8u91. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Fix has been released CVE-2016-3610 P-856V-Java SE: 8u92; Java SE Embedded: 8u91 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-856V-Java SE: 8u92; Java SE Embedded: 8u91 Vulnerability in the Oracle Retail Order Broker component of Oracle Retail Applications (subcomponent: System Administration). The supported version that is affected is 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Order Broker. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Order Broker accessible data as well as unauthorized read access to a subset of Oracle Retail Order Broker accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-3611 P-11520V-15.0 5.4 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11520V-15.0 Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is VirtualBox prior to 5.0.22. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-3612 P-8370V-VirtualBox prior to 5.0.22 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8370V-VirtualBox prior to 5.0.22 Vulnerability in the Oracle Secure Global Desktop component of Oracle Virtualization (subcomponent: OpenSSL). Supported versions that are affected are 4.63, 4.71 and 5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Oracle Secure Global Desktop. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-3613 P-8539V-4.63 P-8539V-4.71 P-8539V-5.2 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8539V-4.63 P-8539V-4.71 P-8539V-5.2 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3614 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 5.3 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.49 and earlier, 5.6.30 and earlier and 5.7.12 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-3615 P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 5.3 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5436 P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Log). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5437 P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Privileges). Supported versions that are affected are 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5439 P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.5.49 and earlier, 5.6.30 and earlier and 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5440 P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.49 and earlier P-8478V-5.6.30 and earlier P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5441 P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption ). Supported versions that are affected are 5.7.12 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5442 P-8478V-5.7.12 and earlier 4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 5.7.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5443 P-8478V-5.7.12 and earlier 4.7 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.7.12 and earlier Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 5.5.48 and earlier, 5.6.29 and earlier and 5.7.11 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5444 P-8478V-5.5.48 and earlier P-8478V-5.6.29 and earlier P-8478V-5.7.11 and earlier 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8478V-5.5.48 and earlier P-8478V-5.6.29 and earlier P-8478V-5.7.11 and earlier Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Authentication). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise ILOM. While the vulnerability is in ILOM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of ILOM accessible data as well as unauthorized read access to a subset of ILOM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of ILOM. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L). Fix has been released CVE-2016-5445 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 8.3 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Infrastructure). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of ILOM accessible data as well as unauthorized read access to a subset of ILOM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of ILOM. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Fix has been released CVE-2016-5446 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Backup-Restore). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all ILOM accessible data as well as unauthorized update, insert or delete access to some of ILOM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of ILOM. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-5447 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: SNMP). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SNMP to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of ILOM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of ILOM. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L). Fix has been released CVE-2016-5448 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: Console Redirection). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ILOM. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of ILOM. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5449 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-5450 P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel UI Framework accessible data as well as unauthorized access to critical data or complete access to all Siebel UI Framework accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Fix has been released CVE-2016-5451 P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 8.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Boot). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-5452 P-10006V-11.3 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: IPMI). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via IPMI to compromise ILOM. Successful attacks of this vulnerability can result in takeover of ILOM. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-5453 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Boot). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris as well as unauthorized update, insert or delete access to some of Solaris accessible data. CVSS 3.0 Base Score 6.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H). Fix has been released CVE-2016-5454 P-10006V-11.3 6.4 AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Multiplexor). Supported versions that are affected are 6.3, 7.0 and 8.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Messaging Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Messaging Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5455 P-8496V-6.3 P-8496V-7.0 P-8496V-8.0 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8496V-6.3 P-8496V-7.0 P-8496V-8.0 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-5456 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 5.3 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the ILOM component of Oracle Sun Systems Products Suite (subcomponent: LUMAIN). Supported versions that are affected are 3.0, 3.1 and 3.2. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise ILOM. Successful attacks of this vulnerability can result in takeover of ILOM. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-5457 P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9849V-3.0 P-9849V-3.1 P-9849V-3.2 Vulnerability in the Oracle Communications EAGLE Application Processor component of Oracle Communications Applications (subcomponent: APPL). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications EAGLE Application Processor. While the vulnerability is in Oracle Communications EAGLE Application Processor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications EAGLE Application Processor accessible data as well as unauthorized read access to a subset of Oracle Communications EAGLE Application Processor accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). Fix has been released CVE-2016-5458 P-11122V-16.0 6.4 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-11122V-16.0 Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM (subcomponent: iHelp). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Common Components. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core - Common Components, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Core - Common Components accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-5459 P-9747V-8.1.1 P-9747V-8.2.2 P-9747V-IP2014 P-9747V-IP2015 P-9747V-IP2016 4.7 AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9747V-8.1.1 P-9747V-8.2.2 P-9747V-IP2014 P-9747V-IP2015 P-9747V-IP2016 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5460 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Object Manager). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-5461 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Workspaces). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5462 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 2.7 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: SWSE Server). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-5463 P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 4.1 AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: SWSE Server). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data. CVSS 3.0 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N). Fix has been released CVE-2016-5464 P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 4.1 AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). Supported versions that are affected are 8.53, 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Fix has been released CVE-2016-5465 P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.53 P-5085V-8.54 P-5085V-8.55 Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server Framework accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5466 P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9001V-8.1.1 P-9001V-8.2.2 P-9001V-IP2014 P-9001V-IP2015 P-9001V-IP2016 Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eProcurement). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FSCM. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FSCM accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FSCM accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-5467 P-5118V-9.1 P-5118V-9.2 5.4 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5118V-9.1 P-5118V-9.2 Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 8.1.1, 8.2.2, IP2014, IP2015 and IP2016. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel UI Framework accessible data as well as unauthorized read access to a subset of Siebel UI Framework accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). Fix has been released CVE-2016-5468 P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 5.4 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-9011V-8.1.1 P-9011V-8.2.2 P-9011V-IP2014 P-9011V-IP2015 P-9011V-IP2016 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5469 P-10006V-11.3 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Designer). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Fix has been released CVE-2016-5470 P-5085V-8.54 P-5085V-8.55 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.54 P-5085V-8.55 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris. CVSS 3.0 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Fix has been released CVE-2016-5471 P-10006V-11.3 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10006V-11.3 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Install and Packaging). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-5472 P-5085V-8.54 P-5085V-8.55 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-5085V-8.54 P-5085V-8.55 Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: File Folders / Attachment). Supported versions that are affected are 9.3.4 and 9.3.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N). Fix has been released CVE-2016-5473 P-4461V-9.3.4 P-4461V-9.3.5 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-4461V-9.3.4 P-4461V-9.3.5 Vulnerability in the Oracle Retail Service Backbone component of Oracle Retail Applications (subcomponent: RSB Kernel). Supported versions that are affected are 14.0, 14.1 and 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Service Backbone. Successful attacks of this vulnerability can result in takeover of Oracle Retail Service Backbone. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Fix has been released CVE-2016-5474 P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 Vulnerability in the Oracle Retail Service Backbone component of Oracle Retail Applications (subcomponent: Install). Supported versions that are affected are 14.0, 14.1 and 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Service Backbone. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Service Backbone accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Service Backbone accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Service Backbone. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-5475 P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-10867V-14.0 P-10867V-14.1 P-10867V-15.0 Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications (subcomponent: Install). Supported versions that are affected are 13.0, 13.1, 13.2, 14.0, 14.1 and 15.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Integration Bus accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Integration Bus accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Integration Bus. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). Fix has been released CVE-2016-5476 P-1807V-13.0 P-1807V-13.1 P-1807V-13.2 P-1807V-14.0 P-1807V-14.1 P-1807V-15.0 7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-1807V-13.0 P-1807V-13.1 P-1807V-13.2 P-1807V-14.0 P-1807V-14.1 P-1807V-15.0 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 2.1.1 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). Fix has been released CVE-2016-5477 P-8493V-2.1.1 P-8493V-3.0.1 5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CPUJul2016 Oracle customers with valid support contracts https://www.oracle.com/security-alerts/cpujul2016.html P-8493V-2.1.1 P-8493V-3.0.1