TI-2016-02109 CVE-2016-2346 · GHSA-p6r4-24w5-r764Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for…Priority LOW 37Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.00944 · Published 2016-04-25 · No fix listed CWE-345