WaratekVRT Sign in

CVE-2016-1000031 Apache Commons FileUpload

Affected softwareApache Commons FileUpload
Severity9.8 Critical CVSS 3.1 3 scores
Fixed in1.3.3
WeaknessImproper access control (CWE-284)
Published25 Oct 2016
Updated13 Nov 2026

Description

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 10 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 33% chance in 30 days A model's forecast, not a report of exploitation. Higher than 98% of all scored CVEs.

Waratek protection

Protected by Waratek

Waratek has a rule that blocks attacks on this vulnerability.

Decided by A researcher's recorded decision for this specific CVE
Finding A researcher found this CVE protected by the ARMR Marshal RCE rule, Deserial sys rule, Marshal RCE rule.

Waratek research note

written 2026-11-13

Written by a Waratek engineer who reviewed this CVE. Their decision sets the status above, ahead of every automated rule except a withdrawal.

Comments

Rule Name: Marshal RCE rule, Deserial sys rule, Marshal RCE rule

  • There exists a Java Object in the Apache Commons FileUpload library that can be manipulated in such a way that when it is deserialized it can write or copy files to disk in arbitrary locations. Furthermore while the Object can be used alone this new vector can be integrated with ysoserial to upload and execute binaries in a single deserialization call. This may or may not work depending on an application's implementation of the FileUpload library. External References: http://www.tenable.com/security/research/tra-2016-12. Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution.

How to mitigate CVE-2016-1000031

Upgrade Apache Commons FileUpload to 1.3.3 or later. Until you can, Waratek RASP blocks exploitation with its deserialization rule. It runs inside the Java application, with no code changes.

Waratek RASP Runtime protection for Java applications

CVSS

9.8 CRITICAL v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA-ADP Secondary published
CVSS 3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD Primary
CVSS 2.0 7.5 none AV:N/AC:L/Au:N/C:P/I:P/A:P NVD Primary

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update October 2021 ↗ CPU 2021-Q4 Oracle Insurance Applications / Development tools (Apache Commons FileUpload) (12.6.0 - 12.6.4)
Oracle Critical Patch Update January 2021 ↗ CPU 2021-Q1 Oracle Enterprise Manager / Reporting Framework (Apache Commons FileUpload) (13.3.0.0, 13.4.0.0)
Oracle Fusion Middleware / General (Apache Commons FileUpload) (11.1.1.9.0)
Oracle Critical Patch Update October 2020 ↗ CPU 2020-Q4 Oracle REST Data Services / General (Apache Commons FileUpload) (11.2.0.4, 12.1.0.2, 12.2.0.1, 18c)
Oracle Siebel CRM / Mktg/Email Mktg Stand-Alone (Apache Commons File Upload) (20.7)
Oracle Critical Patch Update July 2020 ↗ CPU 2020-Q3 Oracle Communications Applications / Core (Apache Commons FileUpload) (8.0.0.4.0)
Oracle Database Server / MapViewer (Apache Commons FileUpload) (12.2.0.1, 18c, 19c)
Oracle's note: MapViewer is not deployed with a default installation. To use MapViewer the customer needs to re-deploy MapViewer EAR file into Oracle WebLogic Server.
Oracle Supply Chain / Middle Tier (Apache Commons FileUpload) (12.1, 12.2)
Oracle Critical Patch Update April 2020 ↗ CPU 2020-Q2 Oracle Fusion Middleware / BI Platform Security (Apache Commons FileUpload) (11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0)
Oracle Knowledge / Information Manager Console, Web Applications - InfoCenter (Apache Commons FileUpload) (8.6.0-8.6.3)
Oracle Critical Patch Update January 2020 ↗ CPU 2020-Q1 Oracle Systems / Software (Apache Commons FileUpload) (8.5)
Oracle Utilities Applications / Core (Apache Commons FileUpload) (1.9.1.2)
Oracle Critical Patch Update October 2019 ↗ CPU 2019-Q4 Oracle Fusion Middleware / BPEL Service Engine and Fabric Layer (Apache Commons FileUpload) (12.2.1.3.0)
Oracle Fusion Middleware / Virtual Directory Server (Apache Commons FileUpload) (11.1.1.9.0)
Oracle Critical Patch Update July 2019 ↗ CPU 2019-Q3 Oracle Communications Applications / Security (Apache Commons FileUpload) (3.0.2)
Oracle Communications Applications / Security (Apache Commons FileUpload) (3.7.1, 3.8.0)
Oracle Communications Applications / Security (Apache Commons FileUpload) (6.1)
Oracle Communications Applications / Security (Apache Commons FileUpload) (8.0.0.2.0)
Oracle Enterprise Manager Products Suite / Load Testing for Web Apps (Apache Commons FileUpload) (13.1, 13.2, 13.3)
Oracle Financial Services Applications / Infrastructure (Apache Commons FileUpload) (12.0, 12.1)
Oracle Financial Services Applications / Infrastructure (Apache Commons FileUpload) (12.0.1-12.0.3, 12.1.0)
Oracle Financial Services Applications / Securities (Apache Commons FileUpload) (5.2.0, 11.6.0, 11.7.0, 11.8.0)
Oracle Fusion Middleware / Advanced UI (Apache Commons FileUpload) (12.2.1.3.0)
Oracle Insurance Applications / Core (Apache Commons FileUpload) (10.0, 10.1, 10.2, 11.0)
Oracle Insurance Applications / Core (Apache Commons FileUpload) (10.0, 10.1, 10.2, 11.0)
Oracle Insurance Applications / Core (Apache Commons FileUpload) (9.7, 10.0, 10.1, 10.2)
Oracle Retail Applications / RIB Kernal (Apache Commons FileUpload) (15.0, 16.0)
Oracle Retail Applications / Retail (Apache Commons FileUpload) (10.8.0 - 10.8.3)
Oracle Supply Chain Products Suite / Installation Issues (Apache Commons FileUpload) (6.2.0, 6.2.1)
Oracle Critical Patch Update April 2019 ↗ CPU 2019-Q2 Oracle Communications Applications / Admin server FileUpload (Apache Commons FileUpload) (6.0)
Oracle Communications Applications / Admin server FileUpload (Apache Commons FileUpload) (6.0)
Oracle Construction and Engineering Suite / Core (Apache Commons FileUpload) (16.1, 16.2, 17.7-17.12, 18.8)
Oracle Construction and Engineering Suite / Web Access (Apache Commons FileUpload) (8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12, 18.8)
Oracle Enterprise Manager Products Suite / Networking (Apache Commons FileUpload) (12.3.3)
Oracle Financial Services Applications / Collections (Apache Commons FileUpload) (2.4.0, 2.4.1, 2.5.0, 2.6.0)
Oracle Financial Services Applications / Core (Apache Commons FileUpload) (2.0.0.0, 2.2.0.1, 12.0.1.0, 12.0.3.0, 12.1.0.0)
Oracle Fusion Middleware / Oracle API Gateway (Apache Commons FileUpload) (11.1.2.4.0)
Oracle Fusion Middleware / Other Issues (Apache Commons FileUpload) (3.2.0)
Oracle Fusion Middleware / Security (Apache Commons FileUpload) (11.1.1.5.8)
Oracle Fusion Middleware / Security Framework (Apache Commons FileUpload) (12.2.1.3.0)
Oracle Health Sciences Applications / Core (Apache Commons FileUpload) (3.0, 4.0)
Oracle Hospitality Applications / Base (Apache Commons FileUpload) (4.2.0, 4.2.1)
Oracle Retail Applications / System Administration (Apache Commons FileUpload) (5.1, 5.2, 15.0, 16.0)
Oracle Retail Applications / Xenvironment (Apache Commons FileUpload) (7.0, 7.1)
Oracle Siebel CRM / Information Manager Console (Apache Commons FileUpload) (High)
Oracle Supply Chain Products Suite / Application Server (Apache Commons FileUpload) (9.3.3, 9.3.4, 9.3.5)
Oracle Supply Chain Products Suite / Recipe (Apache Commons FileUpload) (9.3.3, 9.3.4)
Oracle Utilities Applications / User Interface (Apache Commons FileUpload) (2.2.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.2.0, 4.3.0.3.0, 4.3.0.4.0, 4.3.0.5.0, 4.3.0.6.0, 4.4.0.0.0)
Oracle Critical Patch Update January 2019 ↗ CPU 2019-Q1 Oracle Communications Applications / Security (Apache Commons Collections Fileupload) (prior to 6.1.0.4.0)
Oracle Communications Applications / Security (Apache Commons Fileupload) (prior to 8.3)
Oracle Financial Services Applications / Infrastructure (Apache Commons FileUpload) (7.3.3, 7.3.5, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7)
Oracle Fusion Middleware / Install (Apache Commons FileUpload) (12.2.1.3.0)
Oracle Retail Applications / Install (Apache Commons FileUpload) (13.1, 13.2, 14.0, 14.1, 15.0, 16.0)
Oracle Retail Applications / Security (Apache Commons FileUpload) (13.3, 13.4, 14.0, 14.1)
Oracle Retail Applications / Security (Apache Commons FileUpload) (13.3, 13.4, 14.0, 14.1)
Oracle Retail Applications / Security (Apache Commons FileUpload) (13.3, 13.4, 14.0, 14.1)
Oracle Critical Patch Update October 2018 ↗ CPU 2018-Q4 Oracle Retail Applications / Internal Operations (Apache Commons) (16.0, 17.0)
Oracle Retail Applications / Web Services (Apache Commons) (10.8, 11.4)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Communications Applications Admin server FileUpload (Apache Commons FileUpload) 6.0 6.0
Oracle Communications Applications Core (Apache Commons FileUpload) 8.0.0.4.0 8.0.0.4.0
Oracle Communications Applications Security (Apache Commons Collections Fileupload) prior to 6.1.0.4.0
Oracle Communications Applications Security (Apache Commons FileUpload) 3.0.2 3.0.2 · 3.7.1 · 3.8.0 · 6.1 · 8.0.0.2.0
Oracle Communications Applications Security (Apache Commons Fileupload) prior to 8.3
Oracle Construction and Engineering Suite Core (Apache Commons FileUpload) 16.1, 16.2, 17.7-17.12, 18.8 16.1 · 16.2 · 18.8
Oracle Construction and Engineering Suite Web Access (Apache Commons FileUpload) 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12, 18.8 8.4 · 15.1 · 15.2 · 16.1 · 16.2 · 18.8
Oracle Database Server MapViewer (Apache Commons FileUpload) 12.2.0.1, 18c, 19c 12.2.0.1 · 18 · 19
Oracle Enterprise Manager Reporting Framework (Apache Commons FileUpload) 13.3.0.0, 13.4.0.0 13.3.0.0 · 13.4.0.0
Oracle Enterprise Manager Products Suite Load Testing for Web Apps (Apache Commons FileUpload) 13.1, 13.2, 13.3 13.1 · 13.2 · 13.3
Oracle Enterprise Manager Products Suite Networking (Apache Commons FileUpload) 12.3.3 12.3.3
Oracle Financial Services Applications Collections (Apache Commons FileUpload) 2.4.0, 2.4.1, 2.5.0, 2.6.0 2.4.0 · 2.4.1 · 2.5.0 · 2.6.0
Oracle Financial Services Applications Core (Apache Commons FileUpload) 2.0.0.0, 2.2.0.1, 12.0.1.0, 12.0.3.0, 12.1.0.0 2.0.0.0 · 2.2.0.1 · 12.0.1.0 · 12.0.3.0 · 12.1.0.0
Oracle Financial Services Applications Infrastructure (Apache Commons FileUpload) 12.0.1-12.0.3, 12.1.0 7.3.3 · 7.3.5 · 8.0.1 · 8.0.2 · 8.0.3 · 8.0.4 · 8.0.5 · 8.0.6 · 8.0.7 · 12.0 · 12.1 · 12.1.0
Oracle Financial Services Applications Securities (Apache Commons FileUpload) 5.2.0, 11.6.0, 11.7.0, 11.8.0 5.2.0 · 11.6.0 · 11.7.0 · 11.8.0
Oracle Fusion Middleware Advanced UI (Apache Commons FileUpload) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware BI Platform Security (Apache Commons FileUpload) 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 11.1.1.9.0 · 12.2.1.3.0 · 12.2.1.4.0
Oracle Fusion Middleware BPEL Service Engine and Fabric Layer (Apache Commons FileUpload) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware General (Apache Commons FileUpload) 11.1.1.9.0 11.1.1.9.0
Oracle Fusion Middleware Install (Apache Commons FileUpload) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware Oracle API Gateway (Apache Commons FileUpload) 11.1.2.4.0 11.1.2.4.0
Oracle Fusion Middleware Other Issues (Apache Commons FileUpload) 3.2.0 3.2.0
Oracle Fusion Middleware Security (Apache Commons FileUpload) 11.1.1.5.8 11.1.1.5.8
Oracle Fusion Middleware Security Framework (Apache Commons FileUpload) 12.2.1.3.0 12.2.1.3.0
Oracle Fusion Middleware Virtual Directory Server (Apache Commons FileUpload) 11.1.1.9.0 11.1.1.9.0
Oracle Health Sciences Applications Core (Apache Commons FileUpload) 3.0, 4.0 3.0 · 4.0
Oracle Hospitality Applications Base (Apache Commons FileUpload) 4.2.0, 4.2.1 4.2.0 · 4.2.1
Oracle Insurance Applications Core (Apache Commons FileUpload) 9.7, 10.0, 10.1, 10.2 9.7 · 10.0 · 10.1 · 10.2 · 11.0
Oracle Insurance Applications Development tools (Apache Commons FileUpload) 12.6.0 - 12.6.4
Oracle Knowledge Information Manager Console, Web Applications - InfoCenter (Apache Commons FileUpload) 8.6.0-8.6.3
Oracle REST Data Services General (Apache Commons FileUpload) 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c 11.2.0.4 · 12.1.0.2 · 12.2.0.1 · 18
Oracle Retail Applications Install (Apache Commons FileUpload) 13.1, 13.2, 14.0, 14.1, 15.0, 16.0 13.1 · 13.2 · 14.0 · 14.1 · 15.0 · 16.0
Oracle Retail Applications Internal Operations (Apache Commons) 16.0, 17.0 16.0 · 17.0
Oracle Retail Applications RIB Kernal (Apache Commons FileUpload) 15.0, 16.0 15.0 · 16.0
Oracle Retail Applications Retail (Apache Commons FileUpload) 10.8.0 - 10.8.3
Oracle Retail Applications Security (Apache Commons FileUpload) 13.3, 13.4, 14.0, 14.1 13.3 · 13.4 · 14.0 · 14.1
Oracle Retail Applications System Administration (Apache Commons FileUpload) 5.1, 5.2, 15.0, 16.0 5.1 · 5.2 · 15.0 · 16.0
Oracle Retail Applications Web Services (Apache Commons) 10.8, 11.4 10.8 · 11.4
Oracle Retail Applications Xenvironment (Apache Commons FileUpload) 7.0, 7.1 7.0 · 7.1
Oracle Siebel CRM Information Manager Console (Apache Commons FileUpload) High
Oracle Siebel CRM Mktg/Email Mktg Stand-Alone (Apache Commons File Upload) 20.7 20.7
Oracle Supply Chain Middle Tier (Apache Commons FileUpload) 12.1, 12.2 12.1 · 12.2
Oracle Supply Chain Products Suite Application Server (Apache Commons FileUpload) 9.3.3, 9.3.4, 9.3.5 9.3.3 · 9.3.4 · 9.3.5
Oracle Supply Chain Products Suite Installation Issues (Apache Commons FileUpload) 6.2.0, 6.2.1 6.2.0 · 6.2.1
Oracle Supply Chain Products Suite Recipe (Apache Commons FileUpload) 9.3.3, 9.3.4 9.3.3 · 9.3.4
Oracle Systems Software (Apache Commons FileUpload) 8.5 8.5
Oracle Utilities Applications Core (Apache Commons FileUpload) 1.9.1.2 1.9.1.2
Oracle Utilities Applications User Interface (Apache Commons FileUpload) 2.2.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.2.0, 4.3.0.3.0, 4.3.0.4.0, 4.3.0.5.0, 4.3.0.6.0, 4.4.0.0.0 2.2.0 · 4.2.0.2.0 · 4.2.0.3.0 · 4.3.0.2.0 · 4.3.0.3.0 · 4.3.0.4.0 · 4.3.0.5.0 · 4.3.0.6.0 · 4.4.0.0.0

Maven packages

Affected and fixed versions, from OSV.dev
PackageIntroducedFixedLast affected
commons-fileupload:commons-fileupload 0 1.3.3 unbounded

Products and versions

2 products, 2 version entries
SourceVendorProductSchemeAffected versions
nvd apache commons fileupload generic ≤ 1.3.2
osv commons-fileupload commons-fileupload generic ＜ 1.3.3

Earlier manual review

A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.

## Manual Classification Context **Labels:** RETAIL (APACHE COMMONS FILEUPLOAD), WEB ACCESS (APACHE COMMONS FILEUPLOAD), LOAD TESTING FOR WEB APPS (APACHE COMMONS FILEUPLOAD), REPORTING FRAMEWORK (APACHE COMMONS FILEUPLOAD), NO AUTH REMOTE EXPLOIT, BPEL SERVICE ENGINE AND FABRIC LAYER (APACHE COMMONS FILEUPLOAD), SYSTEM ADMINISTRATION (APACHE COMMONS FILEUPLOAD), RECIPE (APACHE COMMONS FILEUPLOAD), INSTALL (APACHE COMMONS FILEUPLOAD), SOFTWARE (APACHE COMMONS FILEUPLOAD), SEE NOTE 1, SECURITY FRAMEWORK (APACHE COMMONS FILEUPLOAD), INFORMATION MANAGER CONSOLE, ORACLE API GATEWAY (APACHE COMMONS FILEUPLOAD), MKTG/EMAIL MKTG STAND-ALONE (APACHE COMMONS FILE UPLOAD), HTTP, SECURITIES (APACHE COMMONS FILEUPLOAD), SECURITY (APACHE COMMONS COLLECTIONS FILEUPLOAD), COLLECTIONS (APACHE COMMONS FILEUPLOAD), USER INTERFACE (APACHE COMMONS FILEUPLOAD), RIB KERNAL (APACHE COMMONS FILEUPLOAD), CORE (APACHE COMMONS FILEUPLOAD), VALID USER ACCOUNT, MIDDLE TIER (APACHE COMMONS FILEUPLOAD), ADMIN SERVER FILEUPLOAD (APACHE COMMONS FILEUPLOAD), WEB SERVICES (APACHE COMMONS), INFORMATION MANAGER CONSOLE (APACHE COMMONS FILEUPLOAD), ADVANCED UI (APACHE COMMONS FILEUPLOAD), INTERNAL OPERATIONS (APACHE COMMONS), NETWORKING (APACHE COMMONS FILEUPLOAD), INSTALLATION ISSUES (APACHE COMMONS FILEUPLOAD), XENVIRONMENT (APACHE COMMONS FILEUPLOAD), SECURITY (APACHE COMMONS FILEUPLOAD), APPLICATION SERVER (APACHE COMMONS FILEUPLOAD), BI PLATFORM SECURITY (APACHE COMMONS FILEUPLOAD), OTHER ISSUES (APACHE COMMONS FILEUPLOAD), WEB APPLICATIONS - INFOCENTER (APACHE COMMONS FILEUPLOAD), GENERAL (APACHE COMMONS FILEUPLOAD), INFRASTRUCTURE (APACHE COMMONS FILEUPLOAD), VIRTUAL DIRECTORY SERVER (APACHE COMMONS FILEUPLOAD), BASE (APACHE COMMONS FILEUPLOAD), DEVELOPMENT TOOLS (APACHE COMMONS FILEUPLOAD) **Products:** PRIMAVERA UNIFIER, MAPVIEWER (APACHE COMMONS FILEUPLOAD), ORACLE FLEXCUBE UNIVERSAL BANKING, ORACLE ENTERPRISE MANAGER, ORACLE FLEXCUBE CORE BANKING, ORACLE UTILITIES FRAMEWORK, ORACLE COMMUNICATIONS UNIFIED, ORACLE REST DATA SERVICES, ORACLE COMMUNICATIONS ONLINE MEDIATION CONTROLLER, ORACLE FINANCIAL SERVICES APPLICATIONS, ORACLE COMMUNICATIONS CONVERGENCE, ORACLE INSURANCE POLICY ADMINISTRATION J2EE, ENTERPRISE MANAGER OPS CENTER, ORACLE FINANCIAL SERVICES ANALYTICAL APPLICATIONS INFRASTRUCTURE, TAPE LIBRARY ACSLS, ORACLE IDENTITY ANALYTICS, ORACLE WEBCENTER SITES, ORACLE COMMUNICATIONS APPLICATION SESSION CONTROLLER, ORACLE INSURANCE APPLICATIONS, ORACLE UTILITIES WORK AND ASSET MANAGEMENT (V1), ORACLE RETAIL CUSTOMER MANAGEMENT AND SEGMENTATION FOUNDATION, ORACLE FLEXCUBE PRIVATE BANKING, PRIMAVERA P6 ENTERPRISE PROJECT PORTFOLIO MANAGEMENT, MICROS RELATE CRM SOFTWARE, ORACLE SIEBEL CRM, ORACLE FUSION MIDDLEWARE, ORACLE RETAIL INTEGRATION BUS, ORACLE DATABASE SERVER, ORACLE SUPPLY CHAIN PRODUCTS SUITE, ORACLE FUSION MIDDLEWARE MAPVIEWER, ORACLE COMMUNICATIONS APPLICATIONS, APACHE COMMONS FILEUPLOAD, ORACLE UTILITIES APPLICATIONS, ORACLE HEALTH SCIENCES APPLICATIONS, ORACLE ENTERPRISE MANAGER PRODUCTS SUITE, ORACLE RAPID PLANNING, ORACLE BANKING PLATFORM, ORACLE CONSTRUCTION AND ENGINEERING SUITE, ORACLE AGILE ENGINEERING DATA MANAGEMENT, ORACLE RETAIL RETURNS MANAGEMENT, ORACLE WEBCENTER PORTAL, ORACLE HOSPITALITY GUEST ACCESS, ORACLE INSURANCE CALCULATION ENGINE, ORACLE RETAIL APPLICATIONS, ORACLE RETAIL BACK OFFICE, ORACLE APPLICATION TESTING SUITE, ORACLE SOA SUITE, ORACLE SUPPLY CHAIN, ORACLE HEALTHCARE MASTER PERSON INDEX, ORACLE ENDECA INFORMATION DISCOVERY INTEGRATOR, ORACLE FLEXCUBE ENTERPRISE LIMITS AND COLLATERAL MANAGEMENT, ORACLE AGILE PLM, ORACLE API GATEWAY, ENTERPRISE MANAGER BASE PLATFORM, ORACLE BUSINESS INTELLIGENCE ENTERPRISE EDITION, MICROS RETAIL XBRI LOSS PREVENTION, ORACLE COMMUNICATIONS DIAMETER SIGNALING ROUTER (DSR), ORACLE KNOWLEDGE, ORACLE HOSPITALITY APPLICATIONS, ORACLE RETAIL XSTORE POINT OF SERVICE, SIEBEL APPS - MARKETING, ORACLE RETAIL CENTRAL OFFICE, ORACLE COMMUNICATIONS SERVICES GATEKEEPER, ORACLE SYSTEMS, AGILE RECIPE MANAGEMENT FOR PHARMACEUTICALS, ORACLE RETAIL SERVICE BACKBONE, ORACLE RETAIL ORDER BROKER, ORACLE INSURANCE RULES PALETTE, ORACLE ENTERPRISE DATA QUALITY, ORACLE COMMUNICATIONS SERVICE BROKER, ORACLE VIRTUAL DIRECTORY, ORACLE COMMUNICATIONS CONTACTS SERVER, ORACLE COMMUNICATIONS SERVICE BROKER ENGINEERED SYSTEM EDITION, ORACLE DOCUMAKER

References

URLTags
https://www.tenable.com/security/research/tra-2016-30 WEB
https://www.tenable.com/security/research/tra-2016-23 WEB
https://www.tenable.com/security/research/tra-2016-12 WEB
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html WEB
https://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html WEB
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html WEB
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html WEB
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html WEB
https://www.oracle.com/security-alerts/cpuoct2021.html WEB
https://www.oracle.com/security-alerts/cpuoct2020.html WEB

Timeline
Published2016-10-25By the CVE Program.
NVD record modified2026-10-07NVD's own last-modified date for this record.
Classification created2026-11-13First commit adding this CVE's research note.
Last VRT activity2026-11-13Most recent commit touching this CVE's classification, patch or rule file.