Lucene search

K
cveOracleCVE-2016-5522
HistoryOct 25, 2016 - 2:29 p.m.

CVE-2016-5522

2016-10-2514:29:58
CWE-200
oracle
web.nvd.nist.gov
20
cve-2016-5522
oracle
agile plm
supply chain products suite
vulnerability
nvd
confidentiality

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

Low

EPSS

0.001

Percentile

34.9%

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.

Affected configurations

Nvd
Node
oracleagile_product_lifecycle_management_frameworkMatch9.3.4
OR
oracleagile_product_lifecycle_management_frameworkMatch9.3.5
VendorProductVersionCPE
oracleagile_product_lifecycle_management_framework9.3.4cpe:2.3:a:oracle:agile_product_lifecycle_management_framework:9.3.4:*:*:*:*:*:*:*
oracleagile_product_lifecycle_management_framework9.3.5cpe:2.3:a:oracle:agile_product_lifecycle_management_framework:9.3.5:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

Low

EPSS

0.001

Percentile

34.9%

Related for CVE-2016-5522