CVE-2016-5527: Medium severity oracle agile product lifecycle management vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.

Affected Software

4 affected components

Oracle Agile Product Lifecycle Management Framework=9.3.4

Oracle Agile Product Lifecycle Management Framework=9.3.5

Oracle Agile Product Lifecycle Management=9.3.4

Oracle Agile Product Lifecycle Management=9.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5527?

CVE-2016-5527 is considered a moderate severity vulnerability affecting Oracle Agile PLM components.

How do I fix CVE-2016-5527?

To fix CVE-2016-5527, it is recommended to apply the latest security patches released by Oracle for Agile PLM versions 9.3.4 and 9.3.5.

What are the affected versions listed under CVE-2016-5527?

The affected versions under CVE-2016-5527 are Oracle Agile PLM versions 9.3.4 and 9.3.5.

Can CVE-2016-5527 allow remote attacks?

Yes, CVE-2016-5527 allows remote attackers to impact the confidentiality of affected systems.

Is CVE-2016-5527 related to any other vulnerabilities?

CVE-2016-5527 is a different vulnerability than CVE-2016-5524, despite being associated with the same product suite.