CVE-2016-3470: High severity oracle transportation execution vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.

Affected Software

1 affected component

Oracle Transportation Management=6.4.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3470?

CVE-2016-3470 has a moderate severity level affecting confidentiality and integrity in Oracle Transportation Management.

How do I fix CVE-2016-3470?

To resolve CVE-2016-3470, ensure that your Oracle Transportation Management software is updated to a patched version as recommended by Oracle.

Who is affected by CVE-2016-3470?

Remote authenticated users of Oracle Transportation Management version 6.4.1 are affected by CVE-2016-3470.

What components are impacted by CVE-2016-3470?

CVE-2016-3470 specifically impacts the Oracle Transportation Management component in the Oracle Supply Chain Products Suite.

What vectors are involved in CVE-2016-3470?

CVE-2016-3470 involves vectors related to the installation processes of the affected software.