CVE-2016-3489

MEDIUM

Oracle Database Server <12.1.0.2 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

References (4)

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036363

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91874

Scores

CVSS v3 6.7

EPSS 0.0009

EPSS Percentile 25.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

Status draft

Affected Products (3)

oracle/database

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026