PT-2016-5478 · Oracle · Oracle Supply Chain Products Suite+1

Published 2016-04-21 · Updated 2017-09-03 · CVE-2016-3456

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite versions 12.1.1 through 12.1.3

Description The issue affects confidentiality and integrity, and it is related to vectors concerning the Dialog Box in the Oracle Complex Maintenance, Repair, and Overhaul component.

Recommendations For versions 12.1.1 through 12.1.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2016-3456

Affected Products

Oracle Complex Maintenance

Oracle Supply Chain Products Suite

References · 4

• http://oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3456 · Security Note
• http://securitytracker.com/id/1035591 · Note