CVE-2016-5518: High severity oracle agile engineering data management vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.

Affected Software

2 affected components

Oracle Agile Engineering Data Management=6.1.3.0

Oracle Agile Engineering Data Management=6.2.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5518?

CVE-2016-5518 has a medium severity level, potentially affecting the confidentiality, integrity, and availability of affected systems.

How do I fix CVE-2016-5518?

To fix CVE-2016-5518, update to the latest version of Oracle Agile Engineering Data Management as recommended in Oracle's security advisory.

Which versions are affected by CVE-2016-5518?

CVE-2016-5518 affects Oracle Agile Engineering Data Management versions 6.1.3.0 and 6.2.0.0.

What components are impacted by CVE-2016-5518?

CVE-2016-5518 impacts the Oracle Agile Engineering Data Management component within the Oracle Supply Chain Products Suite.

Can CVE-2016-5518 be exploited remotely?

Yes, CVE-2016-5518 allows remote attackers to exploit the vulnerability, affecting multiple security attributes.