CVE-2016-3555: Medium severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3555?

CVE-2016-3555 has been classified as a high-severity vulnerability affecting Oracle Agile PLM components.

How do I fix CVE-2016-3555?

The recommended fix for CVE-2016-3555 is to apply the latest security patches provided by Oracle for versions 9.3.4 and 9.3.5.

What systems are affected by CVE-2016-3555?

CVE-2016-3555 impacts Oracle Agile Product Lifecycle Management framework versions 9.3.4 and 9.3.5.

Can CVE-2016-3555 lead to data breaches?

Yes, CVE-2016-3555 can potentially compromise the confidentiality and integrity of sensitive data.

Is CVE-2016-3555 easily exploitable?

The exploitation of CVE-2016-3555 may allow remote attackers to affect systems, making it critical to apply the necessary patches.