Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2016-3504

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to ADF Faces.

Published: Jul 21, 2016
Updated: Nov 9, 2025
CVE: CVE-2016-3504
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
oracle / jdeveloper	11.1.2.4.0	11.1.2.4.0.x
oracle / jdeveloper	11.1.1.7.0	11.1.1.7.0.x
oracle / jdeveloper	11.1.1.9.0	11.1.1.9.0.x
oracle / jdeveloper	12.2.1.0.0	12.2.1.0.0.x
oracle / jdeveloper	12.1.3.0.0	12.1.3.0.0.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo