CVE-2016-3556: Critical severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3556?

CVE-2016-3556 has a severity rating that impacts confidentiality, integrity, and availability based on the Oracle Core Vulnerabilities.

How do I fix CVE-2016-3556?

To mitigate CVE-2016-3556, update your Oracle Agile PLM component to version 9.3.6 or later as recommended by Oracle.

What versions of Oracle Agile Product Lifecycle Management are affected by CVE-2016-3556?

CVE-2016-3556 affects Oracle Agile Product Lifecycle Management versions 9.3.4 and 9.3.5.

Can CVE-2016-3556 be exploited remotely?

Yes, CVE-2016-3556 can be exploited by remote attackers, affecting the system's confidentiality, integrity, and availability.

What components are involved in CVE-2016-3556?

CVE-2016-3556 specifically involves the Oracle Agile PLM component within the Oracle Supply Chain Products Suite.