AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-3532

HIGH · CVSS 8.2 EPSS 2.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-07-21 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.2. It affects Oracle. It may be remotely exploitable.

CVE
CVE-2016-3532
Severity
HIGH
CVSS
8.2
EPSS
2.81%
Oracle

Original NVD Description

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.