CVE-2016-3537: Medium severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3537?

CVE-2016-3537 is categorized as a moderate severity vulnerability that affects confidentiality.

How do I fix CVE-2016-3537?

To fix CVE-2016-3537, it is recommended to apply the latest security patches provided by Oracle for Agile PLM components.

Who is affected by CVE-2016-3537?

CVE-2016-3537 affects remote authenticated users of Oracle Agile PLM versions 9.3.4 and 9.3.5.

What types of attacks can CVE-2016-3537 lead to?

CVE-2016-3537 can potentially allow remote authenticated users to exploit vulnerabilities related to file folders and attachments.

Is CVE-2016-3537 a known or zero-day vulnerability?

CVE-2016-3537 is a known vulnerability that was identified and disclosed in 2016.