CVE-2016-5473: Low severity oracle agile product lifecycle management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3537.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5473?

The severity of CVE-2016-5473 is categorized as significant since it allows remote authenticated users potentially to affect data confidentiality.

How do I fix CVE-2016-5473?

To fix CVE-2016-5473, it is recommended to update to a patched version of Oracle Agile PLM as specified in Oracle's security advisories.

Who is affected by CVE-2016-5473?

CVE-2016-5473 affects users of Oracle Agile Product Lifecycle Management Framework versions 9.3.4 and 9.3.5.

What types of attacks can exploit CVE-2016-5473?

CVE-2016-5473 can be exploited by authenticated remote users through axes related to file folders and attachments.

Is CVE-2016-5473 the same as CVE-2016-3537?

No, CVE-2016-5473 is a different vulnerability than CVE-2016-3537, which has its own distinct issues.