Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0540.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0576
http://www.securitytracker.com/id/1034727
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html