CVE-2016-3431: Medium severity oracle agile product lifecycle management vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3420.

Affected Software

8 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.1.1

Oracle Agile Product Lifecycle Management Framework=9.3.1.2

Oracle Agile Product Lifecycle Management Framework=9.3.2

Oracle Agile Product Lifecycle Management Framework=9.3.3

Oracle Agile Product Lifecycle Management=9.3.1.1

Oracle Agile Product Lifecycle Management=9.3.1.2

Oracle Agile Product Lifecycle Management=9.3.2

Oracle Agile Product Lifecycle Management=9.3.3

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3431?

CVE-2016-3431 has been classified as a medium severity vulnerability impacting the confidentiality and integrity of affected systems.

How do I fix CVE-2016-3431?

To fix CVE-2016-3431, it is recommended to apply the latest security patches provided by Oracle for the affected versions of Agile PLM.

What versions of Oracle Agile PLM are affected by CVE-2016-3431?

CVE-2016-3431 affects Oracle Agile PLM versions 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3.

Can CVE-2016-3431 be exploited by remote authenticated users?

Yes, CVE-2016-3431 can be exploited by remote authenticated users, potentially compromising security.

What types of impacts can CVE-2016-3431 have on a system?

CVE-2016-3431 can impact the confidentiality and integrity of the data within the affected Agile PLM systems.