Login Request a demo
Critical severity · published Jul 21, 2016
CVE-2016-3468
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect…
9.8
CVSS
5.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Agile Engineering Data Management · Oracle
6.1.3.0; 6.2.0.0 · source: NVD
Affected product
AE
Agile Engineering Data Management
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-3468
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-3468
Patch
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Third Party Advisory
http://www.securityfocus.com/bid/91787
www.securityfocus.com
http://www.securityfocus.com/bid/91922
www.securitytracker.com
http://www.securitytracker.com/id/1036402
More from Agile Engineering Data Management
9.8
CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability
9.8
CVE-2016-8735
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
9.4
CVE-2026-61186
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install)
8.8
CVE-2026-71052
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security)
8.3
CVE-2021-2351
Vulnerability in the Advanced Networking Option component of Oracle Database Server