CVE-2016-3539: High severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3539?

CVE-2016-3539 has a moderate severity, allowing remote authenticated users to potentially affect integrity and availability.

How do I fix CVE-2016-3539?

To fix CVE-2016-3539, it is recommended to apply the latest security patches provided by Oracle for Agile PLM versions 9.3.4 and 9.3.5.

Who is affected by CVE-2016-3539?

CVE-2016-3539 affects users of Oracle Agile Product Lifecycle Management Framework versions 9.3.4 and 9.3.5.

What components are involved in CVE-2016-3539?

CVE-2016-3539 involves the File Folders / Attachment component within the Oracle Agile PLM software.

Can CVE-2016-3539 be exploited remotely?

Yes, CVE-2016-3539 can be exploited by remote authenticated users.