High

DATE	CVE	VULNERABILITY TITLE	RISK
2016-10-25	CVE-2016-5587	Improper Access Control vulnerability in Oracle Customer Interaction History Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591 and CVE-2016-5593. network low complexity oracle CWE-284	8.2
2016-07-21	CVE-2016-3512	Unspecified vulnerability in Oracle Customer Interaction History 12.1.1/12.1.2/12.1.3 Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security. network low complexity oracle	8.2