Vulnerability Details CVE-2016-0638
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.629
EPSS Ranking 99.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.securitytracker.com/id/1035615
- https://www.tenable.com/security/research/tra-2016-09
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.securitytracker.com/id/1035615
- https://www.tenable.com/security/research/tra-2016-09
Products affected by CVE-2016-0638
-
cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0
-
cpe:2.3:a:oracle:weblogic_server:12.1.2.0.0
-
cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0
-
cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0