CVE-2016-3560: Medium severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3529.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3560?

CVE-2016-3560 is considered a serious vulnerability that could impact the confidentiality of Oracle Agile PLM users.

Which versions of Oracle Agile PLM are affected by CVE-2016-3560?

CVE-2016-3560 affects Oracle Agile PLM versions 9.3.4 and 9.3.5.

How do I fix CVE-2016-3560?

To fix CVE-2016-3560, upgrade to the latest patched version of Oracle Agile PLM as recommended by Oracle.

Can CVE-2016-3560 be exploited remotely?

Yes, CVE-2016-3560 can be exploited remotely by attackers, potentially compromising sensitive information.

What components of Oracle Supply Chain Products Suite are impacted by CVE-2016-3560?

CVE-2016-3560 specifically affects the Oracle Agile PLM component within the Oracle Supply Chain Products Suite.