CVE-2016-2346

Published: Apr 25, 2016Modified: May 6, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.

Affected (6)

Products: Allroundautomations: Pl/sql Developer

Allroundautomations

1 product

Pl/sql Developer

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Allroundautomations Pl/sql Developer	Version 11.0.1
Allroundautomations Pl/sql Developer	Version 11.0.2
Allroundautomations Pl/sql Developer	Version 11.0.3
Allroundautomations Pl/sql Developer	Version 11.0.4
Allroundautomations Pl/sql Developer	Version 11.0.5
Allroundautomations Pl/sql Developer	Version 11.0