Main Vulnerability Database Vulnerabilities #VU2624

Information disclosure in Oracle Outside In Technology - CVE-2016-3574

Published: November 30, -0001 / Updated: November 22, 2018

Vulnerability identifier: #VU2624

CSH Severity: Low

CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-3574

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to a flaw in the Outside In Technology Outside In Filters component. A remote attacker can gain access to potentially sensitive data.

Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.

Affected software

Oracle Outside In Technology
Microsoft Exchange Server

How to mitigate CVE-2016-3574

Install update from vendor's website.

External References

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Related Security Bulletins