PT-2016-6492 · Oracle · Oracle Agile Product Lifecycle Management For Process

Published 2016-10-25 · Updated 2023-02-01 · CVE-2016-5504

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process versions 6.1.0.4 through 6.2.0.0

Description The issue affects confidentiality and is related to the Supplier Portal in the Oracle Agile Product Lifecycle Management for Process component. It allows local users to exploit the vulnerability via certain vectors.

Recommendations For versions 6.1.0.4, 6.1.1.6, and 6.2.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5504

Affected Products

Oracle Agile Product Lifecycle Management For Process

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-5504 · Security Note
• http://oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5504 · Vendor Advisory
• http://securityfocus.com/bid/93679 · Note