CVE-2016-3490: Low severity oracle transportation execution vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, and 6.4.1 allows remote authenticated users to affect confidentiality via vectors related to Database.

Affected Software

10 affected components

Oracle Transportation Management=6.3.0

Oracle Transportation Management=6.3.1

Oracle Transportation Management=6.3.2

Oracle Transportation Management=6.3.3

Oracle Transportation Management=6.3.4

Oracle Transportation Management=6.3.5

Oracle Transportation Management=6.3.6

Oracle Transportation Management=6.3.7

Oracle Transportation Management=6.4.0

Oracle Transportation Management=6.4.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3490?

CVE-2016-3490 is classified as a medium severity vulnerability.

How can CVE-2016-3490 affect my Oracle Transportation Management software?

CVE-2016-3490 allows remote authenticated users to affect confidentiality, potentially exposing sensitive database information.

What versions of Oracle Transportation Management are affected by CVE-2016-3490?

CVE-2016-3490 affects Oracle Transportation Management versions 6.3.0 through 6.4.1.

How do I fix CVE-2016-3490?

To fix CVE-2016-3490, you should apply the latest security patches provided by Oracle for affected versions.

Who can exploit CVE-2016-3490?

CVE-2016-3490 can be exploited by remote authenticated users with access to the affected Oracle Transportation Management system.