CVE-2016-3524: Oracle E-Business Suite

Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.

Affected products

• Oracle E-Business Suite: version 12.1.3 only; version 12.2.3 only; version 12.2.4 only; version 12.2.5 only

Published 2016-07-21. Last modified 2026-06-17.