CVE-2016-3468: Critical severity oracle agile engineering data management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.

Affected Software

2 affected components

Oracle Agile Engineering Data Management=6.1.3.0

Oracle Agile Engineering Data Management=6.2.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3468?

CVE-2016-3468 is rated as critical due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-3468?

To fix CVE-2016-3468, upgrade Oracle Agile Engineering Data Management to the latest patched version.

What software versions are affected by CVE-2016-3468?

Oracle Agile Engineering Data Management versions 6.1.3.0 and 6.2.0.0 are affected by CVE-2016-3468.

What type of attacks does CVE-2016-3468 allow?

CVE-2016-3468 allows remote attackers to compromise confidentiality, integrity, and availability.

Is there a specific vector related to CVE-2016-3468?

Yes, the vulnerability is related to unspecified vectors involving the installation process.