CVE-2016-3582

HIGH Year: 2016
CVSS v3 Score
8.6
High
CVSS v2 Score
9.0
Critical
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3581, CVE-2016-3583, CVE-2016-3590, CVE-2016-3591, CVE-2016-3592, CVE-2016-3593, CVE-2016-3594, CVE-2016-3595, and CVE-2016-3596.

Related Vulnerabilities

CVE-2015-5987

HIGH
CVSS:8.6(High)

Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predi...

NVD-CWE-Other2015

CVE-2015-8263

HIGH
CVSS:8.6(High)

NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the des...

NVD-CWE-Other2015

CVE-2015-8616

HIGH
CVSS:8.6(High)

Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application c...

NVD-CWE-Other2015

CVE-2016-1286

HIGH
CVSS:8.6(High)

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME re...

NVD-CWE-Other2016

CVE-2016-1373

HIGH
CVSS:8.6(High)

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10....

NVD-CWE-Other2016

CVE-2016-2222

HIGH
CVSS:8.6(High)

The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value in the first octet of...

NVD-CWE-Other2016