# Vulnerabilities published in 2016


- [CVE-2016-3687](https://insights.sbomify.com/CVE-2016-3687/): Open redirect in f5:big-ip access policy manager (medium 5.3)
- [CVE-2016-3686](https://insights.sbomify.com/CVE-2016-3686/): Information disclosure in f5:big-ip access policy manager (medium 5.9)
- [CVE-2016-3685](https://insights.sbomify.com/CVE-2016-3685/): Hardcoded credentials in sap:download manager (medium 4.7)
- [CVE-2016-3684](https://insights.sbomify.com/CVE-2016-3684/): Hardcoded credentials in sap:download manager (medium 4.7)
- [CVE-2016-3681](https://insights.sbomify.com/CVE-2016-3681/): Memory corruption in huawei:mate 8 firmware (high 7.8)
- [CVE-2016-3680](https://insights.sbomify.com/CVE-2016-3680/): Memory corruption in huawei:mate 8 firmware (high 7.8)
- [CVE-2016-3679](https://insights.sbomify.com/CVE-2016-3679/): Other in canonical:ubuntu linux (high 8.8)
- [CVE-2016-3678](https://insights.sbomify.com/CVE-2016-3678/): Denial of service in huawei:s5300 firmware (high 7.5)
- [CVE-2016-3677](https://insights.sbomify.com/CVE-2016-3677/): Security feature bypass in huawei:hilink app (medium 6.5)
- [CVE-2016-3676](https://insights.sbomify.com/CVE-2016-3676/): Security feature bypass in huawei:e3276s firmware (medium 6.4)
- [CVE-2016-3675](https://insights.sbomify.com/CVE-2016-3675/): SQL injection in huawei:policy center firmware (high 8.1)
- [CVE-2016-3674](https://insights.sbomify.com/CVE-2016-3674/): XML External Entity Injection in XStream (high 7.5)
- [CVE-2016-3672](https://insights.sbomify.com/CVE-2016-3672/): Security feature bypass in canonical:ubuntu linux (high 7.8)
- [CVE-2016-3670](https://insights.sbomify.com/CVE-2016-3670/): Liferay Portal Vulnerable to XSS in Profile Search Functionality (medium 6.1)
- [CVE-2016-3664](https://insights.sbomify.com/CVE-2016-3664/): Weak cryptography in trend micro:mobile security (high 7.4)
- [CVE-2016-3659](https://insights.sbomify.com/CVE-2016-3659/): SQL injection in cacti:cacti (high 8.8)
- [CVE-2016-3658](https://insights.sbomify.com/CVE-2016-3658/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3657](https://insights.sbomify.com/CVE-2016-3657/): Memory corruption in paloaltonetworks:pan-os (critical 9.8)
- [CVE-2016-3656](https://insights.sbomify.com/CVE-2016-3656/): Memory corruption in paloaltonetworks:pan-os (high 7.5)
- [CVE-2016-3655](https://insights.sbomify.com/CVE-2016-3655/): Command injection in paloaltonetworks:pan-os (critical 9.8)
- [CVE-2016-3654](https://insights.sbomify.com/CVE-2016-3654/): Command injection in paloaltonetworks:pan-os (high 7.2)
- [CVE-2016-3653](https://insights.sbomify.com/CVE-2016-3653/): Cross-site request forgery in symantec:endpoint protection manager (high 8.0)
- [CVE-2016-3652](https://insights.sbomify.com/CVE-2016-3652/): Cross-site scripting in symantec:endpoint protection manager (medium 5.4)
- [CVE-2016-3651](https://insights.sbomify.com/CVE-2016-3651/): Information disclosure in symantec:endpoint protection manager (high 8.0)
- [CVE-2016-3650](https://insights.sbomify.com/CVE-2016-3650/): Information disclosure in symantec:endpoint protection manager (high 8.8)
- [CVE-2016-3649](https://insights.sbomify.com/CVE-2016-3649/): Information disclosure in symantec:endpoint protection manager (medium 4.3)
- [CVE-2016-3648](https://insights.sbomify.com/CVE-2016-3648/): Security feature bypass in symantec:endpoint protection manager (high 8.8)
- [CVE-2016-3647](https://insights.sbomify.com/CVE-2016-3647/): Server-side request forgery in symantec:endpoint protection manager (high 7.7)
- [CVE-2016-3646](https://insights.sbomify.com/CVE-2016-3646/): Memory corruption in symantec:advanced threat protection (high 8.4)
- [CVE-2016-3645](https://insights.sbomify.com/CVE-2016-3645/): Integer overflow in symantec:advanced threat protection (critical 9.8)
- [CVE-2016-3644](https://insights.sbomify.com/CVE-2016-3644/): Memory corruption in symantec:advanced threat protection (high 8.4)
- [CVE-2016-3643](https://insights.sbomify.com/CVE-2016-3643/): SolarWinds Virtualization Manager Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2016-3642](https://insights.sbomify.com/CVE-2016-3642/): Deserialization in solarwinds:virtualization manager (critical 9.8)
- [CVE-2016-3640](https://insights.sbomify.com/CVE-2016-3640/): Information disclosure in sap:hana db (medium 5.5)
- [CVE-2016-3639](https://insights.sbomify.com/CVE-2016-3639/): Information disclosure in sap:hana db (medium 4.3)
- [CVE-2016-3638](https://insights.sbomify.com/CVE-2016-3638/): Memory corruption in sap:sld registration (medium 5.5)
- [CVE-2016-3635](https://insights.sbomify.com/CVE-2016-3635/): Security feature bypass in sap:netweaver (high 7.5)
- [CVE-2016-3634](https://insights.sbomify.com/CVE-2016-3634/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3633](https://insights.sbomify.com/CVE-2016-3633/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3632](https://insights.sbomify.com/CVE-2016-3632/): Memory corruption in libtiff:libtiff (high 7.8)
- [CVE-2016-3631](https://insights.sbomify.com/CVE-2016-3631/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3630](https://insights.sbomify.com/CVE-2016-3630/): Mercurial arbitrary code execution vulnerability (high 8.8)
- [CVE-2016-3628](https://insights.sbomify.com/CVE-2016-3628/): Memory corruption in tibco:enterprise message service (high 8.8)
- [CVE-2016-3627](https://insights.sbomify.com/CVE-2016-3627/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2016-3625](https://insights.sbomify.com/CVE-2016-3625/): Memory corruption in libtiff:libtiff (medium 6.5)
- [CVE-2016-3624](https://insights.sbomify.com/CVE-2016-3624/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3623](https://insights.sbomify.com/CVE-2016-3623/): Denial of service in libtiff:libtiff (high 7.5)
- [CVE-2016-3622](https://insights.sbomify.com/CVE-2016-3622/): Denial of service in libtiff:libtiff (medium 6.5)
- [CVE-2016-3621](https://insights.sbomify.com/CVE-2016-3621/): Memory corruption in libtiff:libtiff (high 8.8)
- [CVE-2016-3620](https://insights.sbomify.com/CVE-2016-3620/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2016-3619](https://insights.sbomify.com/CVE-2016-3619/): Memory corruption in libtiff:libtiff (medium 6.5)
- [CVE-2016-3616](https://insights.sbomify.com/CVE-2016-3616/): Null dereference in canonical:ubuntu linux (high 8.8)
- [CVE-2016-3615](https://insights.sbomify.com/CVE-2016-3615/): Denial of service in canonical:ubuntu linux (medium 5.3)
- [CVE-2016-3614](https://insights.sbomify.com/CVE-2016-3614/): Denial of service in canonical:ubuntu linux (medium 5.3)
- [CVE-2016-3613](https://insights.sbomify.com/CVE-2016-3613/): Other in oracle:secure global desktop (critical 9.8)
- [CVE-2016-3612](https://insights.sbomify.com/CVE-2016-3612/): Other in oracle:vm virtualbox (medium 5.9)
- [CVE-2016-3611](https://insights.sbomify.com/CVE-2016-3611/): Other in oracle:retail order broker cloud service (medium 5.4)
- [CVE-2016-3610](https://insights.sbomify.com/CVE-2016-3610/): Other in oracle:jdk (critical 9.6)
- [CVE-2016-3609](https://insights.sbomify.com/CVE-2016-3609/): Other in oracle:database (critical 9.0)
- [CVE-2016-3608](https://insights.sbomify.com/CVE-2016-3608/): Other in oracle:glassfish server (medium 5.8)
- [CVE-2016-3607](https://insights.sbomify.com/CVE-2016-3607/): Other in oracle:glassfish server (critical 9.8)
- [CVE-2016-3606](https://insights.sbomify.com/CVE-2016-3606/): Other in oracle:jdk (critical 9.6)
- [CVE-2016-3598](https://insights.sbomify.com/CVE-2016-3598/): Other in oracle:jdk (critical 9.6)
- [CVE-2016-3597](https://insights.sbomify.com/CVE-2016-3597/): Other in oracle:vm virtualbox (medium 5.5)
- [CVE-2016-3596](https://insights.sbomify.com/CVE-2016-3596/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3595](https://insights.sbomify.com/CVE-2016-3595/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3594](https://insights.sbomify.com/CVE-2016-3594/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3593](https://insights.sbomify.com/CVE-2016-3593/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3592](https://insights.sbomify.com/CVE-2016-3592/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3591](https://insights.sbomify.com/CVE-2016-3591/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3590](https://insights.sbomify.com/CVE-2016-3590/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3589](https://insights.sbomify.com/CVE-2016-3589/): Other in oracle:flexcube direct banking (medium 6.1)
- [CVE-2016-3588](https://insights.sbomify.com/CVE-2016-3588/): Other in oracle:mysql (medium 5.9)
- [CVE-2016-3587](https://insights.sbomify.com/CVE-2016-3587/): Other in oracle:jdk (critical 9.6)
- [CVE-2016-3586](https://insights.sbomify.com/CVE-2016-3586/): Other in oracle:weblogic server (critical 9.8)
- [CVE-2016-3585](https://insights.sbomify.com/CVE-2016-3585/): Other in oracle:integrated lights out manager firmware (high 7.4)
- [CVE-2016-3584](https://insights.sbomify.com/CVE-2016-3584/): Other in oracle:solaris (high 7.0)
- [CVE-2016-3583](https://insights.sbomify.com/CVE-2016-3583/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3582](https://insights.sbomify.com/CVE-2016-3582/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3581](https://insights.sbomify.com/CVE-2016-3581/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3580](https://insights.sbomify.com/CVE-2016-3580/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3579](https://insights.sbomify.com/CVE-2016-3579/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3578](https://insights.sbomify.com/CVE-2016-3578/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3577](https://insights.sbomify.com/CVE-2016-3577/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3576](https://insights.sbomify.com/CVE-2016-3576/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3575](https://insights.sbomify.com/CVE-2016-3575/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3574](https://insights.sbomify.com/CVE-2016-3574/): Other in oracle:outside in technology (high 8.6)
- [CVE-2016-3573](https://insights.sbomify.com/CVE-2016-3573/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3572](https://insights.sbomify.com/CVE-2016-3572/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.4)
- [CVE-2016-3571](https://insights.sbomify.com/CVE-2016-3571/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3570](https://insights.sbomify.com/CVE-2016-3570/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3569](https://insights.sbomify.com/CVE-2016-3569/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3568](https://insights.sbomify.com/CVE-2016-3568/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3567](https://insights.sbomify.com/CVE-2016-3567/): Other in oracle:primavera p6 enterprise project portfolio management (medium 5.4)
- [CVE-2016-3566](https://insights.sbomify.com/CVE-2016-3566/): Other in oracle:primavera p6 enterprise project portfolio management (medium 6.1)
- [CVE-2016-3565](https://insights.sbomify.com/CVE-2016-3565/): Other in oracle:retail order broker (high 7.6)
- [CVE-2016-3564](https://insights.sbomify.com/CVE-2016-3564/): Other in oracle:toplink (high 8.1)
- [CVE-2016-3563](https://insights.sbomify.com/CVE-2016-3563/): Other in oracle:enterprise manager base platform (medium 6.3)
- [CVE-2016-3562](https://insights.sbomify.com/CVE-2016-3562/): Information disclosure in oracle:database server (low 2.4)
- [CVE-2016-3561](https://insights.sbomify.com/CVE-2016-3561/): Other in oracle:agile product lifecycle management (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/51/