CVE-2016-3530: High severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3530?

CVE-2016-3530 is considered to affect the integrity and availability of the affected systems.

How do I fix CVE-2016-3530?

To mitigate CVE-2016-3530, it is recommended to apply the latest security patches released by Oracle for Agile PLM version 9.3.4 and 9.3.5.

Who is affected by CVE-2016-3530?

CVE-2016-3530 affects remote authenticated users of Oracle Agile PLM components in the Supply Chain Products Suite.

What versions are vulnerable to CVE-2016-3530?

The vulnerable versions impacted by CVE-2016-3530 are Oracle Agile PLM 9.3.4 and 9.3.5.

What types of attacks can exploit CVE-2016-3530?

CVE-2016-3530 can be exploited through vectors related to PGC / Import, potentially impacting data integrity and system availability.