Lucene search

[email protected]CVE-2016-5521

HistoryOct 25, 2016 - 2:29 p.m.

CVE-2016-5521

2016-10-2514:29:57

CWE-284

[email protected]

web.nvd.nist.gov

cve-2016-5521

oracle

agile

plm

supply chain

products suite

vulnerability

confidentiality

integrity

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.

Affected configurations

NVD

Node

oracleagile_product_lifecycle_management_frameworkMatch9.3.4

oracleagile_product_lifecycle_management_frameworkMatch9.3.5

CPENameOperatorVersion
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.4
oracle:agile_product_lifecycle_management_frameworkoracle agile product lifecycle management frameworkeq9.3.5

CPE	Name	Operator	Version
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.4
oracle:agile_product_lifecycle_management_framework	oracle agile product lifecycle management framework	eq	9.3.5

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

www.securityfocus.com/bid/93655

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

Related for CVE-2016-5521

cve1 nvd2 prion2 cvelist2 oracle1