← Vulnerability feed

Vulnerability record · CVE-2016-3541 · published 21 July 2016

CVE-2016-3541: Oracle common applications calendar vulnerability

Oracle · Common Applications Calendar

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Notes.

9.1 CVSS 3.0 Critical EPSS 4.0% · top 9.7%
9.1CVSS 3.0 base score, v2 9.4
4.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Notes.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html PatchVendor Advisory
http://www.securityfocus.com/bid/91787 Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91839
http://www.securitytracker.com/id/1036403
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html PatchVendor Advisory
http://www.securityfocus.com/bid/91787 Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91839
http://www.securitytracker.com/id/1036403

Track CVE-2016-3541 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2016-3543Oracle common applications calendar vulnerabilityUnspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and…EPSS 4.0%8.2CVE-2021-2114Oracle Common Applications Calendar unauthenticated data access flawOracle E-Business Suite's Common Applications Calendar component (versions 12.1.1-12.1.3 and 12.2.3-12.2.10) contains an easily exploitable vulnerabi…EPSS 59%analysed8.2CVE-2021-2034Oracle common applications calendar vulnerabilityVulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected …EPSS 1.2%8.2CVE-2020-2820Oracle common applications calendar vulnerabilityVulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). Supported versions that are affected …EPSS 1.3%8.2CVE-2020-2823Oracle common applications calendar vulnerabilityVulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). Supported versions that are affected …EPSS 1.3%8.2CVE-2017-10325Oracle common applications calendar vulnerabilityVulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versio…EPSS 1.9%8.2CVE-2017-10326Oracle common applications calendar vulnerabilityVulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versio…EPSS 1.9%8.2CVE-2016-3436Oracle common applications calendar vulnerabilityUnspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote at…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2016-3541), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.