CVE-2016-3420: Medium severity oracle agile product lifecycle management vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3431.

Affected Software

8 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.1.1

Oracle Agile Product Lifecycle Management Framework=9.3.1.2

Oracle Agile Product Lifecycle Management Framework=9.3.2

Oracle Agile Product Lifecycle Management Framework=9.3.3

Oracle Agile Product Lifecycle Management=9.3.1.1

Oracle Agile Product Lifecycle Management=9.3.1.2

Oracle Agile Product Lifecycle Management=9.3.2

Oracle Agile Product Lifecycle Management=9.3.3

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3420?

CVE-2016-3420 has a severity rating that indicates it allows remote authenticated users to potentially affect confidentiality and integrity.

How do I fix CVE-2016-3420?

To fix CVE-2016-3420, it is recommended to apply the latest Oracle security patches for affected versions of Agile PLM.

Which versions of Oracle Agile PLM are affected by CVE-2016-3420?

CVE-2016-3420 affects Oracle Agile PLM versions 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3.

What types of attacks are associated with CVE-2016-3420?

CVE-2016-3420 may allow for attacks that compromise the confidentiality and integrity of the systems.

Are remote users at risk with CVE-2016-3420?

Yes, remote authenticated users may exploit CVE-2016-3420 to impact the security of the Oracle Agile PLM systems.