CVE-2016-3557: Medium severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3557?

CVE-2016-3557 has a severity rating that indicates it can affect both confidentiality and integrity of affected systems.

How do I fix CVE-2016-3557?

To fix CVE-2016-3557, it is recommended to apply the latest security patches provided by Oracle for versions 9.3.4 and 9.3.5 of Agile PLM.

What software versions are impacted by CVE-2016-3557?

CVE-2016-3557 affects Oracle Agile Product Lifecycle Management versions 9.3.4 and 9.3.5.

What type of attacks does CVE-2016-3557 allow?

CVE-2016-3557 allows remote attackers to compromise the confidentiality and integrity of the affected systems.

Is authentication required to exploit CVE-2016-3557?

The specifics of authentication requirements for exploiting CVE-2016-3557 are not detailed in the vulnerability description.