CVE-2016-3524 Information disclosure in n/a

What is CVE-2016-3524?

CVE-2016-3524 is a medium-severity vulnerability in Oracle E-Business Suite, published on 21 Jul 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.

Which versions are affected by CVE-2016-3524?

It affects 1 product.

Products include Oracle E-Business Suite.

How do I fix CVE-2016-3524?

No fix has been published for CVE-2016-3524 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-3524 being exploited?

There is no known exploitation of CVE-2016-3524 in the wild and no public exploit code.

Other vulnerabilities in Oracle E-Business Suite

• CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Exploited Critical 9.8
• CVE-2022-21587 Oracle E-Business Suite Unspecified Exploited Critical 9.8
• CVE-2015-4798 Other in n/a Critical 10.0
• CVE-2015-4839 Other in n/a Critical 10.0
• CVE-2008-1826 Other in n/a Critical 10.0

All Oracle E-Business Suite vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j49x-m3p2-3mg3.