CVE-2016-0540: Oracle Configurator

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0541.

Affected products

• Oracle Configurator: version 11.5.10.2 only; version 12.1 only; version 12.2 only

Published 2016-01-21. Last modified 2026-06-17.