CVE-2016-3542 is an unspecified vulnerability within the Oracle Knowledge Management component of Oracle E-Business Suite versions 12.1.1 through 12.2.5. This flaw allows remote administrators to compromise the confidentiality and integrity of the system. With a CVSS score of 6.5 (Medium), it can be exploited over the network with low attack complexity, leading to high impact on confidentiality and integrity. While not listed in CISA KEV, an ExploitDB entry (EDB-44041) indicates a potential for XML External Entity leading to Remote Code Execution, despite no active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.1.1CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:* | ||
12.1.2CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:* | ||
12.1.3CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:* | ||
12.2.3CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:* | ||
12.2.4CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.