| Vulnerability Name: | CVE-2016-3586 (CCN-115140) | ||||||||||||
| Assigned: | 2016-07-19 | ||||||||||||
| Published: | 2016-07-19 | ||||||||||||
| Updated: | 2018-10-30 | ||||||||||||
| Summary: | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510. | ||||||||||||
| CVSS v3 Severity: | 9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2016-3586 Source: CCN Type: Oracle CPUJul2016 Oracle Critical Patch Update Advisory - July 2016 Source: CONFIRM Type: Patch, Vendor Advisory http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Source: BID Type: Third Party Advisory, VDB Entry 91787 Source: CCN Type: BID-91787 Oracle July 2016 Critical Patch Update Multiple Vulnerabilities Source: BID Type: UNKNOWN 92016 Source: CCN Type: BID-92016 Oracle WebLogic Server CVE-2016-3586 Remote Code Execution Vulnerability Source: SECTRACK Type: UNKNOWN 1036373 Source: XF Type: UNKNOWN oracle-cpujul2016-cve20163586(115140) Source: CCN Type: ZDI-16-441 Oracle WebLogic JtaTransactionManager Deserialization of Untrusted Data Remote Code Execution Vulnerability | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||