What is the CVSS score of CVE-2016-3470?

CVE-2016-3470 has a CVSS 3.0 base score of 7.1 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2016-3470?

Yes, a patch is available for CVE-2016-3470. Update the affected software to the latest version immediately.

Transportation Management CVE-2016-3470

HIGH

2016-07-21 secalert_us@oracle.com

Information Disclosure Oracle Transportation Management

7.1

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Jul 21, 2016 - 10:12 cve.org

HIGH 7.1

DescriptionCVE.org

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.

AnalysisAI

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Transportation Management

View all

CVE-2017-12617 HIGH Act Now POC

8.1 Oct 04

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

CVE-2020-1938 CRITICAL Act Now POC

9.8 Feb 24

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Rate

CVE-2016-8735 CRITICAL Act Now POC

9.8 Apr 06

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8

CVE-2020-9484 HIGH Act Now POC

7.0 May 20

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a)

CVE-2019-11358 MEDIUM This Month POC

6.1 Apr 20

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

CVE-2026-60583 HIGH This Week

8.8 Jul 21

Full compromise of Oracle Transportation Management 6.5.3 (Supply Chain suite, Install component) is possible for a low-

CVE-2026-60584 HIGH This Week

7.6 Jul 21

Unauthorized data access and partial denial of service in Oracle Transportation Management 6.5.3 (CSV Management compone

CVE-2019-17563 HIGH This Week

7.5 Dec 23

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a na

CVE-2026-60433 MEDIUM This Month

6.5 Jul 21

Critical data exposure and unauthorized modification in Oracle Transportation Management 6.5.3 allows a high-privileged

CVE-2019-2487 MEDIUM This Month

6.5 Jan 16

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI

CVE-2018-2823 MEDIUM This Month

6.5 Apr 19

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Dat

CVE-2017-3530 MEDIUM This Month

6.1 Apr 24

Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Securi

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2016-3470 vulnerability details – vuln.today

Back