Unscored severity · published Jan 21, 2016
CVE-2016-0540
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0541.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Configurator · Oracle
11.5.10.2; 12.1; 12.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0540
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0540
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.securitytracker.com
http://www.securitytracker.com/id/1034727
More from Configurator
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
8.2
CVE-2021-2080
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
8.2
CVE-2021-2079
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
8.2
CVE-2021-2078
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
8.2
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)