CVE-2016-3538: High severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3538?

CVE-2016-3538 is considered to have a moderate severity level affecting the integrity and availability of Oracle Agile PLM.

How do I fix CVE-2016-3538?

To fix CVE-2016-3538, update your Oracle Agile PLM software to the latest version available from Oracle.

Who is affected by CVE-2016-3538?

CVE-2016-3538 affects users of Oracle Agile Product Lifecycle Management versions 9.3.4 and 9.3.5.

What type of users can exploit CVE-2016-3538?

Remote authenticated users can exploit CVE-2016-3538 to impact the integrity and availability of the system.

What components are involved in CVE-2016-3538?

CVE-2016-3538 involves the File Folders / Attachment functionality within the Oracle Agile PLM component.