Vulnerability record · CVE-2016-3532 · published 21 July 2016

CVE-2016-3532: Oracle advanced inbound telephony vulnerability

Oracle · Advanced Inbound Telephony

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

8.2 CVSS 3.0 High EPSS 2.8% · top 14.1%

8.2CVSS 3.0 base score, v2 7.8

2.8%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Advanced Inbound Telephony Oracle

References

Link	Tags
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	PatchVendor Advisory
http://www.securityfocus.com/bid/91787	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91843
http://www.securitytracker.com/id/1036403
https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	PatchVendor Advisory
http://www.securityfocus.com/bid/91787	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91843
http://www.securitytracker.com/id/1036403
https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016	Third Party Advisory

Track CVE-2016-3532 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-34275Oracle advanced inbound telephony missing authentication for critical function vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration). Supported versions t…EPSS 0.51%21 Apr 2026 8.2CVE-2026-70722Oracle advanced inbound telephony improper access control vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that a…EPSS 0.40%18 Aug 2026 8.1CVE-2021-2361Oracle advanced inbound telephony vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). Supported versions tha…EPSS 0.93%21 Jul 2021 7.6CVE-2026-70725Oracle advanced inbound telephony improper access control vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that a…EPSS 0.32%18 Aug 2026 6.3CVE-2026-61256Oracle advanced inbound telephony improper access control vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Servers). Supported versions that are affected …EPSS 0.26%21 Jul 2026 6.3CVE-2026-60491Oracle advanced inbound telephony improper access control vulnerabilityVulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). Supported versions tha…EPSS 0.26%21 Jul 2026

Source: NIST National Vulnerability Database (record CVE-2016-3532), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.