Local User Vulnerability in Oracle Agile Product Lifecycle Management for Process
CVE-2016-5504

4.1MEDIUM

Key Information:

Vendor

Oracle
Status
Agile Product Lifecycle Management For Process
Vendor
CVE Published:
25 October 2016

What is CVE-2016-5504?

A local user vulnerability exists in Oracle Agile Product Lifecycle Management for Process that enables unauthorized access to sensitive information through specific vectors associated with the Supplier Portal. This flaw affects multiple versions of Oracle Supply Chain Products Suite, potentially compromising confidentiality and allowing local users to perform unintended actions.

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93679
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.