Skip to main content

Agile Product Lifecycle Management CVE-2016-5513

MEDIUM
Information Exposure (CWE-200)
2016-10-25 secalert_us@oracle.com
4.3
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 25, 2016 - 14:29 cve.org
MEDIUM 4.3

DescriptionCVE.org

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.

AnalysisAI

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager. Affected products include: Oracle Agile Product Lifecycle Management.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.

CVE-2019-0227 HIGH POC
7.5 May 01

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2

CVE-2016-3556 CRITICAL
9.8 Jul 21

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows

CVE-2026-71040 CRITICAL
9.8 Aug 18

Full compromise of Oracle Agile PLM 9.3.6 is achievable by a remote, unauthenticated attacker sending crafted HTTP reque

CVE-2016-3554 HIGH
8.8 Jul 21

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows

CVE-2016-5523 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows

CVE-2016-5515 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows

CVE-2016-5514 HIGH
8.8 Oct 25

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows

CVE-2026-71039 HIGH
8.8 Aug 18

Oracle Agile PLM 9.3.6 Application Server is susceptible to complete system takeover by a low-privileged attacker operat

CVE-2026-71044 HIGH
8.8 Aug 18

Full system takeover of Oracle Agile PLM 9.3.6 is achievable by any low-privileged authenticated attacker with network H

CVE-2026-71045 HIGH
8.8 Aug 18

Full system takeover in Oracle Agile PLM 9.3.6 is achievable by unauthenticated remote attackers via HTTP, contingent on

CVE-2026-71046 HIGH
8.8 Aug 18

Local privilege escalation in Oracle Agile PLM 9.3.6 enables any low-privileged user with a logon to the host infrastruc

CVE-2024-20953 HIGH
8.8 Feb 17

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). Rated high severity (CVSS 8.8)

Share

CVE-2016-5513 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy