File Load Vulnerability in Oracle Agile PLM Component
CVE-2016-3557

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Agile Product Lifecycle Management Framework
Vendor
CVE Published:
21 July 2016

What is CVE-2016-3557?

A vulnerability exists in the Oracle Agile PLM component of the Oracle Supply Chain Products Suite, specifically in versions 9.3.4 and 9.3.5. This vulnerability could allow remote attackers to compromise the confidentiality and integrity of system information through various vectors associated with file loading operations. Organizations using the affected versions should take immediate steps to secure their systems and mitigate the risk posed by this vulnerability.

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1036402
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/91787
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.