References https://avd.aliyun.com/detail?id=AVD-2016-3427 https://www.cnvd.org.cn/patchInfo/show/128323 https://nvd.nist.gov/vuln/detail/cve-2016-3427 https://www.knowsafe.com/ti/info/0/612250 https://www.knowsafe.com/ti/info/0/615462 https://avd.aliyun.com/detail?id=AVD-2018-3180 https://www.oracle.com/security-alerts/cpuapr2016.html https://nvd.nist.gov/vuln/detail/cve-2018-2797 https://my.f5.com/manage/s/article/K73112451 https://www.rapid7.com/db/vulnerabilities/jre-vuln-cve-2016-3427/
Related VulnerabilitiesPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image InjectionPoCoracle-ebs-sqllog-exposure: Oracle EBS SQL Log - ExposurePoCCVE-2021-2135: Oracle WebLogic Server - Remote Code ExecutionOracle Identity Manager /iam/governance/applicationmanagement/api/v1/applications/groovyscriptstatus;.wadl 命令执行漏洞(CVE-2025-61757)Oracle Identity Manager 访问控制不当漏洞PoCCVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication BypassOracle_E_Business 存在SSRF(CVE-2025-61884)(CVE-2025-61757)Oracle Identity Manager REST WebServices远程接管漏洞(CVE-2025-61884) Oracle配置器运行时UI未授权访问漏洞Oracle E-Business Suite 存在访问控制不当漏洞(CVE-2025-61884)