Skip to main content

Agile Product Lifecycle Management CVE-2016-3519

MEDIUM
2016-07-21 secalert_us@oracle.com
Information Disclosure Oracle Agile Product Lifecycle Management
6.1
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 21, 2016 - 10:13 cve.org
MEDIUM 6.1

DescriptionCVE.org

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut.

AnalysisAI

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut. Affected products include: Oracle Agile Product Lifecycle Management.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Agile Product Lifecycle Management

View all
CVE-2019-0227 HIGH POC
7.5 May 01

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2
CVE-2016-3556 CRITICAL
9.8 Jul 21

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows
CVE-2026-71040 CRITICAL
9.8 Aug 18

Full compromise of Oracle Agile PLM 9.3.6 is achievable by a remote, unauthenticated attacker sending crafted HTTP reque
CVE-2016-3554 HIGH
8.8 Jul 21

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows
CVE-2016-5523 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows
CVE-2016-5515 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows
CVE-2016-5514 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows
CVE-2026-71039 HIGH
8.8 Aug 18

Oracle Agile PLM 9.3.6 Application Server is susceptible to complete system takeover by a low-privileged attacker operat
CVE-2026-71044 HIGH
8.8 Aug 18

Full system takeover of Oracle Agile PLM 9.3.6 is achievable by any low-privileged authenticated attacker with network H
CVE-2026-71045 HIGH
8.8 Aug 18

Full system takeover in Oracle Agile PLM 9.3.6 is achievable by unauthenticated remote attackers via HTTP, contingent on
CVE-2026-71046 HIGH
8.8 Aug 18

Local privilege escalation in Oracle Agile PLM 9.3.6 enables any low-privileged user with a logon to the host infrastruc
CVE-2024-20953 HIGH
8.8 Feb 17

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). Rated high severity (CVSS 8.8)

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2016-3519 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy