CVE-2016-3507: Medium severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3507?

The severity of CVE-2016-3507 is classified as critical due to its potential impact on data integrity.

How do I fix CVE-2016-3507?

To mitigate CVE-2016-3507, apply the latest security updates provided by Oracle for Agile PLM versions 9.3.4 and 9.3.5.

What products are affected by CVE-2016-3507?

CVE-2016-3507 affects Oracle Agile PLM versions 9.3.4 and 9.3.5 within the Oracle Supply Chain Products Suite.

What types of attacks are possible with CVE-2016-3507?

CVE-2016-3507 allows remote attackers to potentially affect the integrity of data by exploiting vulnerabilities in the WebClient/Admin components.

Is CVE-2016-3507 a remote or local vulnerability?

CVE-2016-3507 is a remote vulnerability, allowing attackers to exploit the system from a distance.