CVE-2016-3554: Critical severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3554?

CVE-2016-3554 is classified as a high severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-3554?

To fix CVE-2016-3554, upgrade to Oracle Agile PLM version 9.3.6 or later, where the vulnerability is resolved.

Who is affected by CVE-2016-3554?

CVE-2016-3554 affects remote authenticated users of the Oracle Agile PLM component in versions 9.3.4 and 9.3.5.

What types of attacks can exploit CVE-2016-3554?

CVE-2016-3554 can be exploited through vectors related to PC/BOM, MCAD, and Design processes.

Is CVE-2016-3554 a local or remote vulnerability?

CVE-2016-3554 is a remote vulnerability, allowing authenticated users to exploit it from outside the affected system.