Lucene search

[email protected]CVE-2016-3538

HistoryJul 21, 2016 - 10:13 a.m.

CVE-2016-3538

2016-07-2110:13:34

[email protected]

web.nvd.nist.gov

cve-2016-3538

oracle

agile plm

supply chain products

integrity

availability

remote users

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:C/A:P

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.

Affected configurations

NVD

Node

oracleagile_product_lifecycle_management_frameworkMatch9.3.4

oracleagile_product_lifecycle_management_frameworkMatch9.3.5

CPENameOperatorVersion
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.4
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.5

CPE	Name	Operator	Version
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.4
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.5

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91966

www.securitytracker.com/id/1036402

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:C/A:P

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Related for CVE-2016-3538

prion2 cve1 cvelist2 nvd2 oracle1