Lucene search

[email protected]CVE-2016-3539

HistoryJul 21, 2016 - 10:13 a.m.

CVE-2016-3539

2016-07-2110:13:36

[email protected]

web.nvd.nist.gov

cve-2016-3539

oracle

agile plm

vulnerability

oracle supply chain products suite

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:C/A:P

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.

Affected configurations

NVD

Node

oracleagile_product_lifecycle_management_frameworkMatch9.3.4

oracleagile_product_lifecycle_management_frameworkMatch9.3.5

CPENameOperatorVersion
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.4
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.5

CPE	Name	Operator	Version
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.4
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.5

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91971

www.securitytracker.com/id/1036402

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:C/A:P

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Related for CVE-2016-3539

cve1 prion2 cvelist2 nvd2 oracle1