CVE-2016-0562 Missing authorization in n/a

What is CVE-2016-0562?

CVE-2016-0562 is a medium-severity missing authorization vulnerability in n/a, published on 21 Jan 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in the Oracle Common Applications component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via vectors related to CRM User Management Framework.

Which versions are affected by CVE-2016-0562?

It affects 1 product.

Products include Oracle Common Applications.

How do I fix CVE-2016-0562?

No fix has been published for CVE-2016-0562 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2016-0562 being exploited?

There is no known exploitation of CVE-2016-0562 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-10330 Missing authorization in Common Applications Critical 9.1
• CVE-2021-2436 Cross-site scripting in Common Applications High 8.2
• CVE-2021-2093 Cross-site scripting in Common Applications High 8.2
• CVE-2020-14688 Cross-site scripting in Common Applications High 8.2
• CVE-2019-2665 Cross-site scripting in Common Applications High 8.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8pw2-rm4q-6q47.