VULNERABILITY INTELLIGENCE
CVE-2016-3505
CVSS score8.8 HIGH
EPSS probability5.70%
CISA KEVNot currently listed
Published2016-10-25
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.
Primary references
- secalert_us@oracle.com — Patch, Vendor Advisory
- secalert_us@oracle.com
- secalert_us@oracle.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108