CVE-2016-2346: Allroundautomations Pl/sql Developer

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.

Affected products

• Allroundautomations Pl/sql Developer: version 11.0 only; version 11.0.1 only; version 11.0.2 only; version 11.0.3 only; version 11.0.4 only; version 11.0.5 only

Published 2016-04-25. Last modified 2026-06-17.